Vulnerability-Lookup

RHSA-2026:52857

Vulnerability from csaf_redhat - Published: 2026-08-10 13:36 - Updated: 2026-08-14 10:30

Summary

Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.6 security update

Severity

Important

Notes

Topic: Important: Red Hat OpenShift GitOps v1.19.6 security update

Details: An update is now available for Red Hat OpenShift GitOps.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-15416

A flaw was identified in Argo CD, the GitOps engine used by Red Hat OpenShift GitOps, that could allow an unauthenticated attacker with network access to the Argo CD repo-server to achieve remote code execution. Under certain conditions, the attacker may then manipulate cached data to deploy malicious Kubernetes resources to managed clusters, potentially resulting in complete cluster compromise.

8.9 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

CWE-306 - Missing Authentication for Critical Function

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64	—	Vendor Fix fix Workaround

Known not affected 37 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-25681

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-27136

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-39828

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-281 - Improper Preservation of Permissions

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-39829

A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1284 - Improper Validation of Specified Quantity in Input

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-39830

A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-39831

A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x	—	Vendor Fix fix

Known not affected 41 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le		—

Threats

Impact Important

CVE-2026-39832

A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.

8.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

CWE-281 - Improper Preservation of Permissions

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-39835

A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-39836

A flaw was found in the `net` package of Go (golang). When running on Windows, the `Dial` and `LookupPort` functions can panic if they receive an input containing a NUL (0) byte. This can be triggered by a remote attacker providing a specially crafted input, leading to a denial of service (DoS) for applications using these functions.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le	—	Workaround

Threats

Impact Moderate

CVE-2026-42508

A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x	—	Vendor Fix fix

Known not affected 41 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64		—
Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le		—

Threats

Impact Important

References

98 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:52857	self
https://access.redhat.com/security/cve/CVE-2026-15416	external
https://access.redhat.com/security/cve/CVE-2026-25681	external
https://access.redhat.com/security/cve/CVE-2026-27136	external
https://access.redhat.com/security/cve/CVE-2026-39828	external
https://access.redhat.com/security/cve/CVE-2026-39829	external
https://access.redhat.com/security/cve/CVE-2026-39830	external
https://access.redhat.com/security/cve/CVE-2026-39831	external
https://access.redhat.com/security/cve/CVE-2026-39832	external
https://access.redhat.com/security/cve/CVE-2026-39835	external
https://access.redhat.com/security/cve/CVE-2026-39836	external
https://access.redhat.com/security/cve/CVE-2026-42508	external
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-15416	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496732	external
https://www.cve.org/CVERecord?id=CVE-2026-15416	external
https://nvd.nist.gov/vuln/detail/CVE-2026-15416	external
https://github.com/argoproj/argo-helm/commit/0f245ab	external
https://github.com/argoproj/argo-helm/security/ad…	external
https://thehackernews.com/2026/07/unpatched-argo-…	external
https://www.synacktiv.com/en/publications/caught-…	external
https://access.redhat.com/security/cve/CVE-2026-25681	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480761	external
https://www.cve.org/CVERecord?id=CVE-2026-25681	external
https://nvd.nist.gov/vuln/detail/CVE-2026-25681	external
https://go.dev/cl/781703	external
https://go.dev/issue/79574	external
https://groups.google.com/g/golang-announce/c/iI-…	external
https://pkg.go.dev/vuln/GO-2026-5029	external
https://access.redhat.com/security/cve/CVE-2026-27136	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480757	external
https://www.cve.org/CVERecord?id=CVE-2026-27136	external
https://nvd.nist.gov/vuln/detail/CVE-2026-27136	external
https://go.dev/cl/781685	external
https://go.dev/issue/79575	external
https://pkg.go.dev/vuln/GO-2026-5030	external
https://access.redhat.com/security/cve/CVE-2026-39828	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480687	external
https://www.cve.org/CVERecord?id=CVE-2026-39828	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39828	external
https://go.dev/cl/781621	external
https://go.dev/issue/79562	external
https://groups.google.com/g/golang-announce/c/a08…	external
https://pkg.go.dev/vuln/GO-2026-5014	external
https://access.redhat.com/security/cve/CVE-2026-39829	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480681	external
https://www.cve.org/CVERecord?id=CVE-2026-39829	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39829	external
https://go.dev/cl/781641	external
https://go.dev/cl/781661	external
https://go.dev/issue/79565	external
https://pkg.go.dev/vuln/GO-2026-5018	external
https://access.redhat.com/security/cve/CVE-2026-39830	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480684	external
https://www.cve.org/CVERecord?id=CVE-2026-39830	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39830	external
https://go.dev/cl/781640	external
https://go.dev/cl/781664	external
https://go.dev/issue/79564	external
https://pkg.go.dev/vuln/GO-2026-5017	external
https://access.redhat.com/security/cve/CVE-2026-39831	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480675	external
https://www.cve.org/CVERecord?id=CVE-2026-39831	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39831	external
https://go.dev/cl/781662	external
https://go.dev/issue/79566	external
https://pkg.go.dev/vuln/GO-2026-5019	external
https://access.redhat.com/security/cve/CVE-2026-39832	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480685	external
https://www.cve.org/CVERecord?id=CVE-2026-39832	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39832	external
https://go.dev/cl/778642	external
https://go.dev/issue/79435	external
https://pkg.go.dev/vuln/GO-2026-5006	external
https://access.redhat.com/security/cve/CVE-2026-39835	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480680	external
https://www.cve.org/CVERecord?id=CVE-2026-39835	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39835	external
https://go.dev/cl/781660	external
https://go.dev/issue/79563	external
https://pkg.go.dev/vuln/GO-2026-5015	external
https://access.redhat.com/security/cve/CVE-2026-39836	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467827	external
https://www.cve.org/CVERecord?id=CVE-2026-39836	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39836	external
https://go.dev/cl/775320	external
https://go.dev/issue/79006	external
https://groups.google.com/g/golang-announce/c/qcC…	external
https://pkg.go.dev/vuln/GO-2026-4971	external
https://access.redhat.com/security/cve/CVE-2026-42508	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480688	external
https://www.cve.org/CVERecord?id=CVE-2026-42508	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42508	external
https://go.dev/cl/781220	external
https://go.dev/issue/79568	external
https://pkg.go.dev/vuln/GO-2026-5021	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Important: Red Hat OpenShift GitOps v1.19.6 security update",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "An update is now available for Red Hat OpenShift GitOps.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:52857",
        "url": "https://access.redhat.com/errata/RHSA-2026:52857"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-15416",
        "url": "https://access.redhat.com/security/cve/CVE-2026-15416"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39828"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39829"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39830"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39831"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39832"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39835"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39836",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39836"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42508"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.19/",
        "url": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.19/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_52857.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.6 security update",
    "tracking": {
      "current_release_date": "2026-08-14T10:30:56+00:00",
      "generator": {
        "date": "2026-08-14T10:30:56+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.15"
        }
      },
      "id": "RHSA-2026:52857",
      "initial_release_date": "2026-08-10T13:36:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-10T13:36:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-10T13:36:06+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-14T10:30:56+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift GitOps 1.19",
                "product": {
                  "name": "Red Hat OpenShift GitOps 1.19",
                  "product_id": "Red Hat OpenShift GitOps 1.19",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_gitops:1.19::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift GitOps"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel8@sha256%3Af6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1785150399"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel8@sha256%3A388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1785149260"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel8@sha256%3Ab6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1785148729"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1785148749"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3Aaf9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8\u0026tag=1785149146"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3A6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1785211040"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel8@sha256%3A3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1785149560"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel8@sha256%3A327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1785148567"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8@sha256%3Ab75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1785172359"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8-operator@sha256%3A4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1785171339"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-operator-bundle@sha256%3Aba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-operator-bundle\u0026tag=1785174921"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel8@sha256%3Ab7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1785148786"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel8@sha256%3Ac678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1785150399"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel8@sha256%3Aca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1785149260"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel8@sha256%3A7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1785148729"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1785148749"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3Ae9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8\u0026tag=1785149146"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3Ab48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1785211040"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel8@sha256%3A007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1785149560"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel8@sha256%3Abef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1785148567"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8@sha256%3Ab7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1785172359"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8-operator@sha256%3Ac60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1785171339"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel8@sha256%3Ab22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1785148786"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel8@sha256%3Ad222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1785150399"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel8@sha256%3A3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1785149260"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel8@sha256%3A5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1785148729"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1785148749"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3A20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8\u0026tag=1785149146"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3Aa579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1785211040"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel8@sha256%3A10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1785149560"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel8@sha256%3Afd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1785148567"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8@sha256%3A5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1785172359"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8-operator@sha256%3Ab78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1785171339"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel8@sha256%3Ad9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1785148786"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1785150399"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel8@sha256%3Af222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1785149260"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel8@sha256%3A330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1785148729"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1785148749"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3Aec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8\u0026tag=1785149146"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3A575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1785211040"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel8@sha256%3A4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1785149560"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel8@sha256%3A949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1785148567"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8@sha256%3Ad841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1785172359"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8-operator@sha256%3A8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1785171339"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel8@sha256%3A5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1785148786"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64 as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
          "product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-15416",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "discovery_date": "2026-07-03T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2496732"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was identified in Argo CD, the GitOps engine used by Red Hat OpenShift GitOps, that could allow an unauthenticated attacker with network access to the Argo CD repo-server to achieve remote code execution. Under certain conditions, the attacker may then manipulate cached data to deploy malicious Kubernetes resources to managed clusters, potentially resulting in complete cluster compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "argo-cd: Argo CD unauthenticated remote code execution in repo-server via GenerateManifest gRPC endpoint",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat is aware of a critical, publicly disclosed remote code execution vulnerability affecting the Argo CD repo-server. Under certain conditions, an unauthenticated attacker with network access to the repo-server gRPC interface could execute arbitrary code and, as part of a multi-stage attack involving the Argo CD Redis cache, potentially compromise Kubernetes clusters managed by Argo CD.\n\nRed Hat OpenShift GitOps versions 1.20 and 1.21 are not affected by this vulnerability. The upstream Argo CD flaw requires unauthenticated network access to the repo-server gRPC endpoint and the Redis database. In Red Hat OpenShift GitOps 1.20 and above, Kubernetes NetworkPolicies are enabled by default, restricting ingress to these internal components. As a result, the unauthenticated gRPC call path required for exploitation is not reachable from other pods in the cluster, and the attack chain cannot be initiated.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-15416"
        },
        {
          "category": "external",
          "summary": "RHBZ#2496732",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496732"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-15416",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-15416"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15416",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15416"
        },
        {
          "category": "external",
          "summary": "https://github.com/argoproj/argo-helm/commit/0f245ab",
          "url": "https://github.com/argoproj/argo-helm/commit/0f245ab"
        },
        {
          "category": "external",
          "summary": "https://github.com/argoproj/argo-helm/security/advisories/GHSA-47m3-95c7-g2g8",
          "url": "https://github.com/argoproj/argo-helm/security/advisories/GHSA-47m3-95c7-g2g8"
        },
        {
          "category": "external",
          "summary": "https://thehackernews.com/2026/07/unpatched-argo-cd-repo-server-flaw.html",
          "url": "https://thehackernews.com/2026/07/unpatched-argo-cd-repo-server-flaw.html"
        },
        {
          "category": "external",
          "summary": "https://www.synacktiv.com/en/publications/caught-in-the-octopus-trap-unauthenticated-rce-in-argo-cd-with-codeql",
          "url": "https://www.synacktiv.com/en/publications/caught-in-the-octopus-trap-unauthenticated-rce-in-argo-cd-with-codeql"
        }
      ],
      "release_date": "2026-07-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T13:36:00+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52857"
        },
        {
          "category": "workaround",
          "details": "Limit network access to the Argo CD repo-server gRPC endpoint to trusted internal components using Kubernetes NetworkPolicy or equivalent network access controls. Do not expose the repo-server outside the cluster or to untrusted networks. Restrict access to the associated Redis service and update to a fixed version once one becomes available.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.9,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "argo-cd: Argo CD unauthenticated remote code execution in repo-server via GenerateManifest gRPC endpoint"
    },
    {
      "cve": "CVE-2026-25681",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:01:08.177603+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781703",
          "url": "https://go.dev/cl/781703"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79574",
          "url": "https://go.dev/issue/79574"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5029",
          "url": "https://pkg.go.dev/vuln/GO-2026-5029"
        }
      ],
      "release_date": "2026-05-22T15:01:21.975000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T13:36:00+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52857"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
    },
    {
      "cve": "CVE-2026-27136",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:00:56.609820+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480757"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480757",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781685",
          "url": "https://go.dev/cl/781685"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79575",
          "url": "https://go.dev/issue/79575"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5030",
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "release_date": "2026-05-22T15:01:22.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T13:36:00+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52857"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
    },
    {
      "cve": "CVE-2026-39828",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "discovery_date": "2026-05-22T04:01:46.775641+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480687"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39828"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480687",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781621",
          "url": "https://go.dev/cl/781621"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79562",
          "url": "https://go.dev/issue/79562"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5014",
          "url": "https://pkg.go.dev/vuln/GO-2026-5014"
        }
      ],
      "release_date": "2026-05-22T02:31:26.883000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T13:36:00+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52857"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
    },
    {
      "cve": "CVE-2026-39829",
      "cwe": {
        "id": "CWE-1284",
        "name": "Improper Validation of Specified Quantity in Input"
      },
      "discovery_date": "2026-05-22T04:01:30.092249+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480681"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39829"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480681",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781641",
          "url": "https://go.dev/cl/781641"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781661",
          "url": "https://go.dev/cl/781661"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79565",
          "url": "https://go.dev/issue/79565"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5018",
          "url": "https://pkg.go.dev/vuln/GO-2026-5018"
        }
      ],
      "release_date": "2026-05-22T02:31:27.324000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T13:36:00+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52857"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
    },
    {
      "cve": "CVE-2026-39830",
      "cwe": {
        "id": "CWE-772",
        "name": "Missing Release of Resource after Effective Lifetime"
      },
      "discovery_date": "2026-05-22T04:01:38.517202+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480684"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39830"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480684",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781640",
          "url": "https://go.dev/cl/781640"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781664",
          "url": "https://go.dev/cl/781664"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79564",
          "url": "https://go.dev/issue/79564"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5017",
          "url": "https://pkg.go.dev/vuln/GO-2026-5017"
        }
      ],
      "release_date": "2026-05-22T02:31:27.208000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T13:36:00+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52857"
        },
        {
          "category": "workaround",
          "details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
    },
    {
      "cve": "CVE-2026-39831",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-05-22T04:01:12.861178+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480675"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480675",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781662",
          "url": "https://go.dev/cl/781662"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79566",
          "url": "https://go.dev/issue/79566"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5019",
          "url": "https://pkg.go.dev/vuln/GO-2026-5019"
        }
      ],
      "release_date": "2026-05-22T02:31:27.436000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T13:36:00+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52857"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
    },
    {
      "cve": "CVE-2026-39832",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "discovery_date": "2026-05-22T04:01:41.402561+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480685"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39832"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480685",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/778642",
          "url": "https://go.dev/cl/778642"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79435",
          "url": "https://go.dev/issue/79435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5006",
          "url": "https://pkg.go.dev/vuln/GO-2026-5006"
        }
      ],
      "release_date": "2026-05-22T02:31:26.660000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T13:36:00+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52857"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
    },
    {
      "cve": "CVE-2026-39835",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-05-22T04:01:27.279943+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480680"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39835"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480680",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781660",
          "url": "https://go.dev/cl/781660"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79563",
          "url": "https://go.dev/issue/79563"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5015",
          "url": "https://pkg.go.dev/vuln/GO-2026-5015"
        }
      ],
      "release_date": "2026-05-22T02:31:26.982000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T13:36:00+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52857"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
    },
    {
      "cve": "CVE-2026-39836",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-05-07T20:01:49.423498+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467827"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net` package of Go (golang). When running on Windows, the `Dial` and `LookupPort` functions can panic if they receive an input containing a NUL (0) byte. This can be triggered by a remote attacker providing a specially crafted input, leading to a denial of service (DoS) for applications using these functions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This denial of service flaw exists within the Go `net` package, specifically impacting applications when executed on Microsoft Windows operating systems. Red Hat Product Security has rated this flaw as a Moderate as Red Hat products primarily deploy Go applications on Linux-based environments. Customers operating Go applications, including those bundled with Red Hat products, within a Windows environment should assess their exposure to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39836"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467827",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467827"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39836",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39836"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39836",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39836"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/775320",
          "url": "https://go.dev/cl/775320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79006",
          "url": "https://go.dev/issue/79006"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4971",
          "url": "https://pkg.go.dev/vuln/GO-2026-4971"
        }
      ],
      "release_date": "2026-05-07T19:41:18.300000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T13:36:00+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52857"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows"
    },
    {
      "cve": "CVE-2026-42508",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-05-22T04:01:49.515058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480688"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
          "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42508"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480688",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781220",
          "url": "https://go.dev/cl/781220"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79568",
          "url": "https://go.dev/issue/79568"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5021",
          "url": "https://pkg.go.dev/vuln/GO-2026-5021"
        }
      ],
      "release_date": "2026-05-22T02:31:27.644000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T13:36:00+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52857"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d046fc4a4abd29189af3a8d01eeb9ba38261fa30cb5adfdeac54f5fa5cb5305_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:c678a84165a60596f4aba9aee51f6437e6465e0af47e7562b06b0d8f5a1bf8a9_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d222a8cb9c2f33c7741d1b9695acd558a24a15c3a80adb1d54605c910237ceda_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f6167de02c0403131881e30296edb45e6aa711a414da2de623c3bf6d9c731e6d_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:330ead58ecce72175ce2c34f207e80755783a0534cb2a8e94bd15ee5cf92511d_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:5947a59783b905502b66af07befb19ab6fab4be99714dbedd7149e97096db4e0_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7e964c76f80bcccf684e9623f5b4d97413f4b590a905c4e5253a784b22af50ac_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b6a0c02b0c2578ba9013ce3fa39e8f24bca8a23fca5dead02492c53bdee6f3de_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5ad703c24f73e3da315399f8e5fd563c5b618a22db136859cf23aa44a000dac3_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:765743affc37903b9bae5f5fac16fe020e1308945cb888ab8e72bff909bd6705_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7ad9db84580d10f4d360f5e638e881a1313da9a4a451196c8ba0dcb3286fd76b_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:7fd4f18969029ebd021e29589b1a540cab6f27ab0db0149bae64a81312799566_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:20e60ecb2be26acaa621f12bb375f57ce26287773d9861f72c2c634927712f39_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:af9890aa8a5d4d983740b3417c6968bb81532223a87b1502a6b272378b68b942_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:e9ad4a36bf18dfffefcc27dce89334cf0cc306f4eb0a6c53c3d5bc3c6393d7ea_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:ec656dfd54812c4ed207d20b25fdade5ea420940ebc23c42c32a76be12d4b301_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:388eb549053f8d18a1ea3487ad0c3ff9058f1e47e6f54cdaadee26806b9b3b78_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3b1b3795a7a9a69902021c9b759394f6beeeb9c38eef8330469d501e4b9cae42_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ca23d643694d9e47a1108f8ad0cee0eebb086f2e4bbbd513882bfc48919c1895_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f222617d567faca6eb1419f4e83fdac19fc243aec1781ae32a692ac09440fb55_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:575d88f67f65fcf1f50162b6e61665b2135d745206b8e13f4865f666feaa8262_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6686d4a4703ad5d2fb2b5868817f556b72b26025f3e6ec96a8882a38e350ff89_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a579d5894ccf8eb5e5fde8886d4147bac2a76497a5cba413d1a2edc7611d1150_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b48e180aa536afb9bbde682789067039407ac3bd90e05652f19fe8471837f86b_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:007fcc54a14a82969d44e7a8cae7f4ed43242de5969dba6f09d5e099da874dc8_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:10ec7bba4c958ed31fb82a4fbbf7fa92bc375655b2548b3d660ff793a7b0a9f4_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:3b58275492956e95561564c4e7ab86138bb5745176a09e0ba36aca324108112e_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:4d0f91e941a2c80fd77dd420582b6dd1fdce7f8a0cb2f04e6fb86166cc5db92c_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:327e2bff158f9f1b12f4310652f8617359632a577f1e0b723979fa899638ed36_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:949fae84cd4d7506f6467880aa882c4c6fec61c8aa630b2c811c5b42382a5b17_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:bef0de7eccfa245effacfe1c32eb5b6e09438620c6f8ba16b84c8e0eab589737_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:fd48c03434d3bfa38a2442804bbc4daa371d8a5aad3158084af60b9dd5c1f132_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:ba8a383b66f3115591f896740b6a408c3a9c3c4a14c9cb06fb6b0f7d0c16a506_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4032c3c30e786decf6f5dc7f386c4626586c633b97217bbd40a6d29d30eaf831_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:8ea771ddd924f47948e6e1122f9be093b6b25436ce3732c81afeddfb975dee5f_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b78d250327b257cd0c74ca1b6e2af459465b7176bd17bf1af965acbef6dc819a_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c60d219e3eeb529640fef23f2d78e0861d9948cba5ceb8618830b52190c371fe_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5155fd59f1f0497529e57666fdb3a83a721d5308d050959ee913eb60ffbd8164_ppc64le",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b75c0708daf5370408dbd619e307f70674671ef7ca9a16b58ab6a2bcc48a4e56_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:b7fae8a06620e2e2f21234540946d5c6972ccddf177926131c5e4024ac8a5dee_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d841e9815beb276c9995a3f1c44116f3c95df966a669a579212c3bd7b4f8e037_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:5e926b18fb9aa06deabba4911da583d251aa9db81042e58a5ad1cc50fbfb31ee_s390x",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b22e375fe7e1af9278c3b1751da10a24dd63d5af0d55c2330e4ec68101cfdd58_arm64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b7f97508f9970c5372dac752ef892964c3681f86a1ad9d2e4e7124fe591c264f_amd64",
            "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:d9760a8f8a648f10e2adb5cd095902e89706e3a765952236802cd07f271323fe_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
    }
  ]
}

CVE-2026-42508 (GCVE-0-2026-42508)

Vulnerability from cvelistv5 – Published: 2026-05-22 02:31 – Updated: 2026-08-13 12:04

Title

Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

Summary

Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-22 18:43 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

References

41 references

URL	Tags
https://go.dev/issue/79568
https://go.dev/cl/781220
https://groups.google.com/g/golang-announce/c/a08…
https://pkg.go.dev/vuln/GO-2026-5021
https://access.redhat.com/security/cve/CVE-2026-42508	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2480688	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:41019	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37072	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35833	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51288	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49944	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37123	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36808	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51033	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43692	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41064	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47737	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54400	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26546	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26547	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40945	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40118	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23264	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36648	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41036	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:52857	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:52910	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41031	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42146	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43052	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41066	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36797	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46885	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47735	vendor-advisoryx_refsource_REDHAT

Impacted products

80 products

Vendor	Product	Version
golang.org/x/crypto	golang.org/x/crypto/ssh/knownhosts	Affected: 0 , < 0.52.0 (semver)
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 7:5.8.2-4.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260701102925.afee755d , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 8060020260803064027.ad008a3a , < * (rpm) cpe:/a:redhat:rhel_aus:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	Unaffected: 8060020260803064027.ad008a3a , < * (rpm) cpe:/a:redhat:rhel_eus_long_life:8.6
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 8080020260721142025.63b34585 , < * (rpm) cpe:/a:redhat:rhel_tus:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 8080020260721142025.63b34585 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 6:5.8.2-4.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	RHEM 1.0 for RHEL 9	Unaffected: 0:1.0.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	RHEM 1.1 for RHEL 10	Unaffected: 0:1.1.3-1.el10em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	RHEM 1.1 for RHEL 9	Unaffected: 0:1.1.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.1:el9
Red Hat	DevWorkspace Operator 0.42	Unaffected: 1782401674 , < * (rpm) cpe:/a:redhat:devworkspace:0.42::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1784646026 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784646786 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	OpenShift API for Data Protection 1.3	Unaffected: 1785177359 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.3::el9
Red Hat	OpenShift API for Data Protection 1.6	Unaffected: 1784058822 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.6::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1783813250 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784740143 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Security 4.9	Unaffected: 1781686446 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	Unaffected: 1781686458 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502025 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784196588 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784126780 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Hardened Images	Unaffected: 1.25.11-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 1.26.4-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783057868 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1784121108 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1783612119 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932114 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782931768 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932104 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783536000 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783535989 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783536515 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932521 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783018461 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783018421 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932812 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537001 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932919 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537586 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932969 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933015 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933042 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537392 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933235 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933251 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537955 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933417 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537742 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933602 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783019377 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934054 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934036 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934284 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat OpenShift GitOps 1.19	Unaffected: 1785149260 , < * (rpm) cpe:/a:redhat:openshift_gitops:1.19::el8
Red Hat	Red Hat OpenShift GitOps 1.20	Unaffected: 1785211346 , < * (rpm) cpe:/a:redhat:openshift_gitops:1.20::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1783750447 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1783751865 , < * (rpm) Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1784351966 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1783955846 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1784125838 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 4-1.4.2 , < * (rpm) Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Assisted Installer for Red Hat OpenShift Container Platform 2	cpe:/a:redhat:assisted_installer:2
Red Hat	External Secrets Operator for Red Hat OpenShift	cpe:/a:redhat:external_secrets_operator:1
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat OpenStack Platform 17.1	cpe:/a:redhat:openstack:17.1
Red Hat	Red Hat OpenStack Platform 18.0	cpe:/a:redhat:openstack:18.0
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-42508",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T18:43:40.584666Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T18:44:33.483Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "7:5.8.2-4.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260701102925.afee755d",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260803064027.ad008a3a",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus_long_life:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260803064027.ad008a3a",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8080020260721142025.63b34585",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8080020260721142025.63b34585",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "6:5.8.2-4.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.0 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el10em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1:el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:devworkspace:0.42::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devworkspace/devworkspace-rhel9-operator",
            "product": "DevWorkspace Operator 0.42",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782401674",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784646026",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784646786",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-mustgather-rhel9",
            "product": "OpenShift API for Data Protection 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785177359",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784058822",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783813250",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784740143",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781686446",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781686458",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-api-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502025",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-api-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784196588",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-api-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784126780",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-25-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.25.11-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-26-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.26.4-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057868",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-rhel9-operator",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784121108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783612119",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782931768",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/devicefinder-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932104",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536000",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783535989",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536515",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932521",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018421",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-blackbox-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537001",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932919",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537586",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932969",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933015",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933042",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-drbd-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537392",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933235",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933251",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537955",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933417",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537742",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933602",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783019377",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-mover-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934054",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934284",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.19::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel8",
            "product": "Red Hat OpenShift GitOps 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785149260",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel9",
            "product": "Red Hat OpenShift GitOps 1.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785211346",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783750447",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783751865",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784353904",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784351966",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783955846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784125838",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "conforma-cli-stack-v1",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.2",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "assisted/agent-preinstall-image-builder-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "external-secrets-operator/external-secrets-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "unknown",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-plugin-func-func-util-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-clients",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/volsync-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/alloy-rhel10",
            "product": "Red Hat Ceph Storage 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "microshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unknown",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-tests",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-tests-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kubevirt",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-googlecode-go-crypto",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel8/osp-director-agent",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel9/osp-director-agent",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoso-operators/prometheus-podman-exporter-rhel9",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-builder-rhel9",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-22T02:31:27.644Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-295",
                "description": "Improper Certificate Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T12:04:21.446Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-42508"
          },
          {
            "name": "RHBZ#2480688",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42508.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41019"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37072"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35833"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51288"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49944"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37123"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36808"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51033"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43692"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41064"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47737"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54400"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26546"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26547"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40945"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40118"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23264"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36648"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41036"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:52857"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:52910"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41031"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42146"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43052"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41066"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36797"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46885"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47735"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37072: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35833: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51288: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49944: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37123: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36808: DevWorkspace Operator 0.42"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41064: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54400: Red Hat Advanced Cluster Management for Kubernetes 2.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26546: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26547: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23262: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23264: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:52857: Red Hat OpenShift GitOps 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:52910: Red Hat OpenShift GitOps 1.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41031: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42146: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43052: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42796: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41066: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40262: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-22T04:01:49.515Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-22T02:31:27.644Z",
            "value": "Made public."
          }
        ],
        "title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/crypto/ssh/knownhosts",
          "product": "golang.org/x/crypto/ssh/knownhosts",
          "programRoutines": [
            {
              "name": "hostKeyDB.IsRevoked"
            }
          ],
          "vendor": "golang.org/x/crypto",
          "versions": [
            {
              "lessThan": "0.52.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Previously, a revoked \u0027SignatureKey\u0027 belonging to a CA was not correctly checked for revocation. Now, both the \u0027key\u0027 and \u0027key.SignatureKey\u0027 are checked for @revoked."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-295: Improper Certificate Validation",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T02:31:27.644Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79568"
        },
        {
          "url": "https://go.dev/cl/781220"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5021"
        }
      ],
      "title": "Invoking  auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-42508",
    "datePublished": "2026-05-22T02:31:27.644Z",
    "dateReserved": "2026-04-28T00:21:12.792Z",
    "dateUpdated": "2026-08-13T12:04:21.446Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2026:52857

CVE-2026-42508 (GCVE-0-2026-42508)

Tags

Sightings

Nomenclature