{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Important: Red Hat OpenShift GitOps v1.20.6 security update",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "An update is now available for Red Hat OpenShift GitOps.\nBug Fix(es) and Enhancement(s):\n* GITOPS-10444 (Document as known: GitOps deployment fails as Kustomize 5.8.1 HelmChartInflationGenerator omits SonarQube namespace)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:52910",
        "url": "https://access.redhat.com/errata/RHSA-2026:52910"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39828"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39829"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39830"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39831"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39832"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39835"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42508"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.20/",
        "url": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.20/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_52910.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.6 security update",
    "tracking": {
      "current_release_date": "2026-08-11T15:15:04+00:00",
      "generator": {
        "date": "2026-08-11T15:15:04+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.14"
        }
      },
      "id": "RHSA-2026:52910",
      "initial_release_date": "2026-08-10T14:51:20+00:00",
      "revision_history": [
        {
          "date": "2026-08-10T14:51:20+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-10T14:51:38+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-11T15:15:04+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift GitOps 1.20",
                "product": {
                  "name": "Red Hat OpenShift GitOps 1.20",
                  "product_id": "Red Hat OpenShift GitOps 1.20",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_gitops:1.20::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift GitOps"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel9@sha256%3Ae13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1785211243"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3A857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1785211346"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel9@sha256%3Ae28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1785176384"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel9@sha256%3A1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1785211129"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3Af3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1786369531"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel9@sha256%3A31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1785177706"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel9@sha256%3A8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1785211182"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9@sha256%3Af35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1785176307"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9-operator@sha256%3A94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1785176218"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-operator-bundle@sha256%3A0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-operator-bundle\u0026tag=1786370896"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel9@sha256%3A4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1785209593"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel9@sha256%3A5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1785211243"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3A5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1785211346"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel9@sha256%3A5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1785176384"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel9@sha256%3A880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1785211129"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1786369531"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel9@sha256%3A120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1785177706"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel9@sha256%3Ae0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1785211182"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9@sha256%3A995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1785176307"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9-operator@sha256%3Ad1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1785176218"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel9@sha256%3A5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1785209593"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel9@sha256%3A8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1785211243"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3Af538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1785211346"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel9@sha256%3A14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1785176384"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel9@sha256%3A44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1785211129"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1786369531"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel9@sha256%3A42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1785177706"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel9@sha256%3A6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1785211182"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9@sha256%3Ae973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1785176307"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9-operator@sha256%3Af1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1785176218"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel9@sha256%3A56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1785209593"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel9@sha256%3A00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1785211243"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3A70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1785211346"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel9@sha256%3A559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1785176384"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel9@sha256%3Afc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1785211129"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3Ae0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1786369531"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel9@sha256%3A244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1785177706"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel9@sha256%3A3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1785211182"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9@sha256%3A617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1785176307"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9-operator@sha256%3A384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1785176218"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel9@sha256%3A9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1785209593"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64 as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x as a component of Red Hat OpenShift GitOps 1.20",
          "product_id": "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.20"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-25681",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:01:08.177603+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781703",
          "url": "https://go.dev/cl/781703"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79574",
          "url": "https://go.dev/issue/79574"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5029",
          "url": "https://pkg.go.dev/vuln/GO-2026-5029"
        }
      ],
      "release_date": "2026-05-22T15:01:21.975000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T14:51:20+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52910"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
    },
    {
      "cve": "CVE-2026-27136",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:00:56.609820+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480757"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480757",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781685",
          "url": "https://go.dev/cl/781685"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79575",
          "url": "https://go.dev/issue/79575"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5030",
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "release_date": "2026-05-22T15:01:22.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T14:51:20+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52910"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
    },
    {
      "cve": "CVE-2026-39828",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "discovery_date": "2026-05-22T04:01:46.775641+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480687"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39828"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480687",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781621",
          "url": "https://go.dev/cl/781621"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79562",
          "url": "https://go.dev/issue/79562"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5014",
          "url": "https://pkg.go.dev/vuln/GO-2026-5014"
        }
      ],
      "release_date": "2026-05-22T02:31:26.883000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T14:51:20+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52910"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
    },
    {
      "cve": "CVE-2026-39829",
      "cwe": {
        "id": "CWE-1284",
        "name": "Improper Validation of Specified Quantity in Input"
      },
      "discovery_date": "2026-05-22T04:01:30.092249+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480681"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39829"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480681",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781641",
          "url": "https://go.dev/cl/781641"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781661",
          "url": "https://go.dev/cl/781661"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79565",
          "url": "https://go.dev/issue/79565"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5018",
          "url": "https://pkg.go.dev/vuln/GO-2026-5018"
        }
      ],
      "release_date": "2026-05-22T02:31:27.324000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T14:51:20+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52910"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
    },
    {
      "cve": "CVE-2026-39830",
      "cwe": {
        "id": "CWE-772",
        "name": "Missing Release of Resource after Effective Lifetime"
      },
      "discovery_date": "2026-05-22T04:01:38.517202+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480684"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39830"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480684",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781640",
          "url": "https://go.dev/cl/781640"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781664",
          "url": "https://go.dev/cl/781664"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79564",
          "url": "https://go.dev/issue/79564"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5017",
          "url": "https://pkg.go.dev/vuln/GO-2026-5017"
        }
      ],
      "release_date": "2026-05-22T02:31:27.208000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T14:51:20+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52910"
        },
        {
          "category": "workaround",
          "details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
    },
    {
      "cve": "CVE-2026-39831",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-05-22T04:01:12.861178+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480675"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480675",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781662",
          "url": "https://go.dev/cl/781662"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79566",
          "url": "https://go.dev/issue/79566"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5019",
          "url": "https://pkg.go.dev/vuln/GO-2026-5019"
        }
      ],
      "release_date": "2026-05-22T02:31:27.436000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T14:51:20+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52910"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
    },
    {
      "cve": "CVE-2026-39832",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "discovery_date": "2026-05-22T04:01:41.402561+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480685"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39832"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480685",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/778642",
          "url": "https://go.dev/cl/778642"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79435",
          "url": "https://go.dev/issue/79435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5006",
          "url": "https://pkg.go.dev/vuln/GO-2026-5006"
        }
      ],
      "release_date": "2026-05-22T02:31:26.660000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T14:51:20+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52910"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
    },
    {
      "cve": "CVE-2026-39835",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-05-22T04:01:27.279943+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480680"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39835"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480680",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781660",
          "url": "https://go.dev/cl/781660"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79563",
          "url": "https://go.dev/issue/79563"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5015",
          "url": "https://pkg.go.dev/vuln/GO-2026-5015"
        }
      ],
      "release_date": "2026-05-22T02:31:26.982000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T14:51:20+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52910"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
    },
    {
      "cve": "CVE-2026-42508",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-05-22T04:01:49.515058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480688"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
          "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42508"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480688",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781220",
          "url": "https://go.dev/cl/781220"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79568",
          "url": "https://go.dev/issue/79568"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5021",
          "url": "https://pkg.go.dev/vuln/GO-2026-5021"
        }
      ],
      "release_date": "2026-05-22T02:31:27.644000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-10T14:51:20+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:52910"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:00ab3f1c310b9d271fcd443b55ac584b16eed918110248ca93ea70f31f920dd3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:5dc131c6cfa2c3b51b413dca51f29c78a0a50ec5f4a60bad0dcaca7285f03e72_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8460e8fd3aa1782cea6f7dafffdc0ce905e35b5d2031f800fc1421e9058a8b81_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:e13198a63c267ab7e4447218a5b071a4d64d7828e3c19825642b690fdd924a12_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:14a01615cea9153eae529bfee5f0d62d8f0df78e222217bc3c0e885512001f18_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:559599a66ad79ac5cd0f45fcc36535cc5a44e294dc7f19a389ac1a85842c15f3_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:5dd26d91dea4e8f12914d649854544e93ced87ef9d31aa85d837cbc7dde71fd3_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:e28b5f43144ec00d70c9783df0746137528ed5c31119cc3d0efe79e7d610caf4_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1a0fa9305c51cc018e30db541f7d9eae8a7149f9ad1fe54de3f1fa13b5a31c07_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:44ea2bef7f926cfc75c8e97de4b75208f04aea7b2ef50d1f553e5f28790d8235_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:880eb37b3450547fd3f83ab720f04f420c1927c0ec9cb988d567a92929d854d9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:fc68588a2cf7c68f11f5381530c9046ee96ed7ff40f0458110df21882b7e3666_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:37c88231b75ed84457dbef520c16586e2bd250062956cb03b75e9c7d574445ab_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:539f9f95ebc0f32b3645548fd94abb087dad391fe5182a715b21c85e2231ccf5_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e0757f600f0572473524382a3b581bd454d740228f36a88aba81dd8fbe46021c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f3a697acdc090650bc9cd5bbb85314bced2a9f3ab8d463839406a28c8713a4f0_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e5c98b183a483d24356930e6ed8561f6c1731e9cb495021c1be080554cfdd54_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:70aad197929ddb3d4b7f0ac3ce450652b8b3f23a5633115b855b83f6994a433c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:857c25929f02dcdb5efdfca6a44270aa59279ee00fc0d1e844ffcaed9494e5ff_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f538166c509e824680dae0beae52f3fb2952da9ced6e57a365f49f7f4ca1ee0e_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:120b87848c99a28d4bc3bcc2bdae93f591928d916c211d606fc1c9e1dc19f18f_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:244f8fbe5ec80a4a250091ffbcdb1bf306af18fdea6244e8f6f49f0a44e80264_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:31aa77b980ca80dd04d20688808feb2e5eb5d21f4c128004dc721a9ddaacb73a_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:42b3a7e88b81bce3445885d6005305728495a67ae9f01ce3ce83094706f61d67_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3acfbdb97f1e3d88363393f95e1a4cc20741267d16c33010b0dc598321d0531e_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6deca0a6dc84212f857860f578609615be187789a807d75c14adcaf29a9477bc_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8a1dd18f2ff4b02cc9510e3585b6fc01744f55ede6842a8467b9f3dbe8f3bcba_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:e0232cf48a552cc2f58cbb0539c0cd2c97410238f1a89b947bf5157d32d69b15_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:0aea43abfd0702c07cf70541bc46fe742b0742c9f43641134e2163eaca8f4b5c_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:384142240004a743c5eae16e11d43d341a16d014884a78e99db540efe2e85c47_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:94436f5fa1c9e90fa1e6cfb60e7397167d07152c63977d9637df6c91bf916053_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d1d3144dc940438c544b6eb92ebdf9b86011659384525da9c239b80d41803204_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f1fca56c20f664292ccb70c97a8f257e099eab7f05009ae85b2ba983ad2db950_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:617c5f48ae2c254071034ac37f275e4ad7177c4239c8039c67721c5900102a7c_s390x",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:995d12c0d3b8d8bfe68483b4f620a426b8e02a20da53b8b71b5f4e0fa2f9df52_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e973f1061909dd5d02cb5b89380363c79ab0ff361c34a0353c9f496132c921bf_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:f35fcd4671bf5125ac85f2df7c0ff0b08180878befdc68b65e3f3b12cd6bf306_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4366d257d7471fe5ab3f4506b2878c70c221da4dceed21e175349d067afa15c1_amd64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:56b8cd2f3642d3a9632bf24a0d6fcd563924ad965a3a3cb365dbc85f01231c2f_ppc64le",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5bf0e50521517aefd23cde290536bb13db3f5987fec79246d9127e1fc41c76f9_arm64",
            "Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9af091589bd7e64b1c625c3b565677a2abad7e39b1125a1f43edc1650f79bc7c_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
    }
  ]
}