{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.15.8 is now available with bug fixes.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.15.8",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:63307",
        "url": "https://access.redhat.com/errata/RHSA-2026:63307"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-15927",
        "url": "https://access.redhat.com/security/cve/CVE-2026-15927"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-18255",
        "url": "https://access.redhat.com/security/cve/CVE-2026-18255"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44705",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44705"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-49477",
        "url": "https://access.redhat.com/security/cve/CVE-2026-49477"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59869"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-67320",
        "url": "https://access.redhat.com/security/cve/CVE-2026-67320"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-69152",
        "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-69153",
        "url": "https://access.redhat.com/security/cve/CVE-2026-69153"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73086",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73086"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73089",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73089"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63307.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Quay 3.15.8",
    "tracking": {
      "current_release_date": "2026-09-03T21:26:30+00:00",
      "generator": {
        "date": "2026-09-03T21:26:30+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:63307",
      "initial_release_date": "2026-09-03T18:45:09+00:00",
      "revision_history": [
        {
          "date": "2026-09-03T18:45:09+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-03T18:45:25+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-03T21:26:30+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Quay 3.15",
                "product": {
                  "name": "Red Hat Quay 3.15",
                  "product_id": "Red Hat Quay 3.15",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3.15::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1787988957"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Af4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1787988311"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1787987365"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1787986808"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1787985818"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3Acb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1787824210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3Aa7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1787986213"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256%3A1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1788196149"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3A162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1787987657"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3A8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1788191755"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ae67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1787988311"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Af744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1787986808"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3Ad1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1787824210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3A76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1787986213"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3A38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1787987657"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3A64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1788191755"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Af97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1787988311"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Aebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1787986808"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3A0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1787824210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3A483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1787986213"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3Aa16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1787987657"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3Afbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1788191755"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64 as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64 as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64 as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64 as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64 as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64 as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64 as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64 as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64 as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64 as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x as a component of Red Hat Quay 3.15",
          "product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.15"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Shaon Hossain"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        },
        {
          "names": [
            "Martin Brodeur"
          ]
        }
      ],
      "cve": "CVE-2026-15927",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-02-13T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2501256"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Red Hat Quay\u0027s repository-level mirror configuration\nfeature. The POST and PUT handlers in endpoints/api/mirror.py accept an\nexternal_reference parameter without SSRF validation, unlike the\norganization-level mirror handlers which apply validate_external_registry_url().\nA repository administrator can supply a crafted hostname that causes the Quay\nmirror worker to make requests via Skopeo to internal network services, cloud\nmetadata endpoints, or other resources not intended to be reachable from the\nQuay application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "quay: mirror-registry: SSRF: repo-level mirror accepts external_reference without URL validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in Red Hat Quay\u0027s repository-level mirror configuration allows an authenticated repository administrator to conduct Server-Side Request Forgery (SSRF). By providing a specially crafted hostname, an attacker can force the Quay mirror worker to connect to internal network services or cloud metadata endpoints, potentially exposing sensitive internal resources. This risk is limited to actions performed by an authenticated administrator.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-15927"
        },
        {
          "category": "external",
          "summary": "RHBZ#2501256",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501256"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-15927",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-15927"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15927",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15927"
        }
      ],
      "release_date": "2026-07-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T18:45:09+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63307"
        },
        {
          "category": "workaround",
          "details": "Restrict network egress from Quay mirror worker pods/containers using network\npolicies or firewall rules to block access to internal network ranges\n(10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) and cloud metadata endpoints\n(169.254.169.254, metadata.google.internal). Limit repository creation and\nadmin privileges to trusted users via Quay\u0027s RBAC configuration. If\nrepository-level mirroring is not required, disable the feature or restrict\naccess to the mirror API endpoints through a reverse proxy.",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "quay: mirror-registry: SSRF: repo-level mirror accepts external_reference without URL validation"
    },
    {
      "cve": "CVE-2026-18255",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "discovery_date": "2026-07-21T14:34:20+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2508454"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "quay: quay: Global read-only superuser can view robot account tokens",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18255"
        },
        {
          "category": "external",
          "summary": "RHBZ#2508454",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508454"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18255",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18255"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18255",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18255"
        }
      ],
      "release_date": "2026-07-21T14:34:20+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T18:45:09+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63307"
        },
        {
          "category": "workaround",
          "details": "Remove users who can not be trusted with robot account credentials from GLOBAL_READONLY_SUPER_USERS.",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "quay: quay: Global read-only superuser can view robot account tokens"
    },
    {
      "cve": "CVE-2026-44705",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-06-11T17:01:27.295887+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487946"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the designated temporary directory. This could lead to unauthorized file creation at attacker-controlled locations with the privileges of the running process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tmp: path Traversal via unsanitized prefix/postfix enables directory escape",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Applications that pass user-controlled data to the file or directory creation functions without input sanitization are vulnerable to this issue. This flaw allows files to be created in arbitrary locations with the privileges of the running process. Due to this reason, this vulnerability has been rated with an Important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44705"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487946",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487946"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44705",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44705"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44705",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44705"
        },
        {
          "category": "external",
          "summary": "https://github.com/raszi/node-tmp/security/advisories/GHSA-ph9p-34f9-6g65",
          "url": "https://github.com/raszi/node-tmp/security/advisories/GHSA-ph9p-34f9-6g65"
        }
      ],
      "release_date": "2026-06-11T15:42:46.565000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T18:45:09+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63307"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, validate and sanitize any user-controlled data before it is passed to the prefix, postfix or dir options of the file or directory creation functions, specifically rejecting or stripping input containing path traversal sequences.",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tmp: path Traversal via unsanitized prefix/postfix enables directory escape"
    },
    {
      "cve": "CVE-2026-49477",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-07-14T22:04:22.677547+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500752"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in soupsieve, a CSS selector library. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by supplying specially crafted, untrusted CSS selector strings. The flaw occurs due to a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value, leading to CPU exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "soupsieve: Soupsieve: Denial of Service via crafted CSS selector strings",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: A regular expression denial of service (ReDoS) flaw in the soupsieve library can lead to CPU exhaustion. A remote attacker can exploit this by supplying a small, specially crafted CSS selector string to applications that process untrusted CSS, potentially blocking worker threads and causing a complete service denial in affected Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-49477"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500752",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500752"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-49477",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-49477"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49477",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49477"
        },
        {
          "category": "external",
          "summary": "https://github.com/facelessuser/soupsieve/commit/eb4397618709186c109400448c6043b728217dc3",
          "url": "https://github.com/facelessuser/soupsieve/commit/eb4397618709186c109400448c6043b728217dc3"
        },
        {
          "category": "external",
          "summary": "https://github.com/facelessuser/soupsieve/releases/tag/2.8.4",
          "url": "https://github.com/facelessuser/soupsieve/releases/tag/2.8.4"
        },
        {
          "category": "external",
          "summary": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-836r-79rf-4m37",
          "url": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-836r-79rf-4m37"
        }
      ],
      "release_date": "2026-07-14T20:51:29.369000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T18:45:09+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63307"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "soupsieve: Soupsieve: Denial of Service via crafted CSS selector strings"
    },
    {
      "cve": "CVE-2026-56852",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-07-21T20:01:56.266823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/794100",
          "url": "https://go.dev/cl/794100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80142",
          "url": "https://go.dev/issue/80142"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5970",
          "url": "https://pkg.go.dev/vuln/GO-2026-5970"
        }
      ],
      "release_date": "2026-07-21T19:18:59.951000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T18:45:09+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63307"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
    },
    {
      "cve": "CVE-2026-59869",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-07-08T16:01:38.408322+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498122"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498122",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
          "url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
          "url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
        }
      ],
      "release_date": "2026-07-08T15:15:54.675000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T18:45:09+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63307"
        },
        {
          "category": "workaround",
          "details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
    },
    {
      "cve": "CVE-2026-67320",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-08-01T13:01:50.659496+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509993"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in axios when used in a Node.js deployment with the HTTP adapter. This vulnerability, known as Prototype Pollution, occurs because request interceptors can revert hardened request configurations, allowing an attacker to manipulate the Object.prototype.proxy property. If successfully exploited, an attacker can route affected plaintext HTTP requests through a malicious proxy, potentially observing sensitive data such as authentication headers and request bodies, and even returning their own responses.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: axios: Information disclosure via Prototype Pollution in Node HTTP adapter",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-67320"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509993",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509993"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-67320",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-67320"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67320",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67320"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/commit/df53d7dd99b202fb194217abd127ae6a630e70dc",
          "url": "https://github.com/axios/axios/commit/df53d7dd99b202fb194217abd127ae6a630e70dc"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-gcfj-64vw-6mp9",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-gcfj-64vw-6mp9"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/axios-before-prototype-pollution-via-node-http-adapter",
          "url": "https://www.vulncheck.com/advisories/axios-before-prototype-pollution-via-node-http-adapter"
        }
      ],
      "release_date": "2026-08-01T12:22:17.547000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T18:45:09+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63307"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: axios: Information disclosure via Prototype Pollution in Node HTTP adapter"
    },
    {
      "cve": "CVE-2026-69152",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-03T18:01:13.566423+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510722"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Any applications that pass user-controlled input to the `expand()` function are vulnerable to this issue. This flaw can result in an excessive consumption of memory that eventually terminates the process or blocks the event loop, both causing a denial of service. As this vulnerability allows a remote attacker to cause a denial of service, it has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510722",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510722"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69152",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
          "url": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
          "url": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
          "url": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
          "url": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
          "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"
        }
      ],
      "release_date": "2026-08-03T16:33:36.324000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T18:45:09+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63307"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not pass untrusted input to the expand() function.",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"
    },
    {
      "cve": "CVE-2026-69153",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-08-03T18:01:01.506065+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510719"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration (the \u0027from\u0027 parameter) is not set. This can cause the application to read and expose unintended source-map files, potentially revealing sensitive information about the application\u0027s source code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postcss: PostCSS: Information disclosure via crafted sourceMappingURL",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this flaw as Moderate because the information disclosed is limited to files with a .map extension. Source map files may contain source code paths and content, but the attacker cannot read arbitrary files on the system. Exploitation requires the application to process attacker-controlled CSS through PostCSS on the server side.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69153"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510719",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510719"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69153",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69153"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69153",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69153"
        },
        {
          "category": "external",
          "summary": "https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8",
          "url": "https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"
        },
        {
          "category": "external",
          "summary": "https://github.com/postcss/postcss/releases/tag/8.5.19",
          "url": "https://github.com/postcss/postcss/releases/tag/8.5.19"
        },
        {
          "category": "external",
          "summary": "https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp",
          "url": "https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp"
        }
      ],
      "release_date": "2026-08-03T16:56:25.733000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T18:45:09+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63307"
        },
        {
          "category": "workaround",
          "details": "Pass map: false when invoking PostCSS to disable source map auto-loading. This prevents the path traversal from being triggered, though it removes source map support entirely.",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "postcss: PostCSS: Information disclosure via crafted sourceMappingURL"
    },
    {
      "cve": "CVE-2026-73086",
      "cwe": {
        "id": "CWE-1241",
        "name": "Use of Predictable Algorithm in Random Number Generator"
      },
      "discovery_date": "2026-08-11T17:11:45.607696+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the `nanoid(size)` function. This issue causes the internal random number generator to become predictable, leading to the generation of identical identifiers for session tokens, security tokens (Cross-Site Request Forgery (CSRF) tokens), and API keys. Such predictability could allow an attacker to bypass security measures that rely on unique and random identifiers.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nanoid: nanoid: Predictable ID generation due to integer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the nanoid JavaScript library allows a remote attacker to cause predictable ID generation by exploiting an integer overflow in the `nanoid(size)` function. This can lead to the compromise of session tokens, CSRF tokens, and API keys, bypassing security mechanisms. The attack requires specific conditions, contributing to its Important severity rather than Critical.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73086"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73086",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73086"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73086",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73086"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4",
          "url": "https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3",
          "url": "https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac",
          "url": "https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/releases/tag/3.3.12",
          "url": "https://github.com/ai/nanoid/releases/tag/3.3.12"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/releases/tag/5.1.11",
          "url": "https://github.com/ai/nanoid/releases/tag/5.1.11"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w",
          "url": "https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w"
        }
      ],
      "release_date": "2026-08-11T16:46:23.024000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T18:45:09+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63307"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "nanoid: nanoid: Predictable ID generation due to integer overflow"
    },
    {
      "cve": "CVE-2026-73089",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-11T17:12:48.012036+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514195"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Browserslist, a configuration tool for front-end development. An attacker can exploit this vulnerability by influencing repeated query values, leading to unbounded memory growth. This issue can cause the application to consume excessive memory, resulting in an out-of-memory process crash and a Denial of Service (DoS) for affected systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `browserslist` library, which is used across several Red Hat products and services. The flaw allows an attacker to trigger unbounded memory growth by influencing query values, potentially leading to an out-of-memory crash and service unavailability. This is considered Important due to the potential for remote exploitation and significant impact on service stability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
          "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73089"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514195",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514195"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73089",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73089"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73089",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73089"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/commit/f2931a3ff2a3a31abf84ef01a7400b270aad6405",
          "url": "https://github.com/browserslist/browserslist/commit/f2931a3ff2a3a31abf84ef01a7400b270aad6405"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/releases/tag/4.28.7",
          "url": "https://github.com/browserslist/browserslist/releases/tag/4.28.7"
        },
        {
          "category": "external",
          "summary": "https://github.com/browserslist/browserslist/security/advisories/GHSA-c83g-rgw3-j3cx",
          "url": "https://github.com/browserslist/browserslist/security/advisories/GHSA-c83g-rgw3-j3cx"
        }
      ],
      "release_date": "2026-08-11T17:05:38.760000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T18:45:09+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63307"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:483abfcbdfd29453ec86bf7ce858a75abb4eaf70eedcd63a67484364ec831aed_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76e67fa13972a0a301849cf0f6934701cc149e235341ddf51a59401da16dfb18_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:a7991a3736f7bf4071f76a4dc7c1099b1a879ee344c7fdf24e6bd02e7d7f2d82_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:26f2c35032f706fedeb90e7747c7d5c38582f898d30e353711420df82dd86978_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c37bedbf4a0a0970d9a962c5b6fc8fd610975e2cdc44b470f986db00dd890d1_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ebbfc055d4e7d306cc31961fa0082bbaece26362d671dab06bf947de9ab86abe_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f744a688215a5826bcd0f64a2418277d9017866f9f9a284a1451a72a0a1b0f05_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:79e2c8a18682cf8a7126145600446a186752a4abf1972b7f122c7533cbdcafb5_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:0b3bfd2452eae566214670d4e08e554b58e270d2be3a5c0c0ce55184fe2d26ee_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:cb02d5a909d3ecb2b819c8e20d5a49e06d26e99876286b93b635e481fcf0e18d_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:d1c6c4fc0cb17637608e9218b47e1aab92d1672b839f18f33737ac5657fd78ae_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:70b8735da066da874f7c4b9e2d98e70766ed897f1d9bd49ed444e015b1e4b66f_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e67f07891d3c3e3e28bd803277eaa10ce2e1af349487a386fbe4b7896931c1e3_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f4a583578a3489a6f723ac9619f709fb1ba33b90af365eaee88984cdd1036e8e_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f97ffce4325909ad1eace0fccf0d3f3f85782f4a0b2b042fb2f85775a302af48_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:1d1de1b252cd2449d042ec63292537f5fe74ffdee3c7dfe23c01516009147161_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:162f7e5aa6ee7237dec06945d3d2aae55009a352d73856b5de7b262f57e3024b_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:38b5bc6606276ffc743d2bada43026d44556bf312cfed4470d4625084fee60ce_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:a16b07e4d12738efac798f505452f0b3866ff8d93673c8c5af95beafee83d665_s390x",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:64967e93bbf7f56601309bea7951c40c2b9fd01be85324d5287c20bf5083861a_ppc64le",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8d540b5a0cbe5db8b35ec6b3de676e30bafc9f96dd84298fa0f940d89d372a01_amd64",
            "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:fbfed57fbd3387c4066ef25d30f098632c8ccf9c75e6c37fbfc4b1b79c934998_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results"
    }
  ]
}