RHSA-2026:90337
Vulnerability from csaf_redhat - Published: 2026-10-26 14:56 - Updated: 2026-11-04 15:54Summary
Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.6 security update
Severity
Important
Notes
Topic: Important: Red Hat OpenShift GitOps v1.21.6 security update
Details: An update is now available for Red Hat OpenShift GitOps.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Argo CD's repository server component. An authenticated user with permissions to create or update repository configurations can supply a crafted proxy address containing special characters for an SSH (Secure Shell) repository. Because the server processes this proxy address directly through a system shell without proper sanitization, an attacker can execute arbitrary commands on the repository server and access stored credentials.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x | — |
Vendor Fix
fix
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64 | — |
Threats
Impact
Important
A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink, which, when cloned and its worktree operations are used, can lead to reading from or writing to arbitrary files outside the intended working directory. This could result in information disclosure or arbitrary file modification.
7.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64 | — |
Vendor Fix
fix
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64 | — |
Threats
Impact
Moderate
References
39 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Important: Red Hat OpenShift GitOps v1.21.6 security update",
"title": "Topic"
},
{
"category": "general",
"text": "An update is now available for Red Hat OpenShift GitOps.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:90337",
"url": "https://access.redhat.com/errata/RHSA-2026:90337"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55797",
"url": "https://access.redhat.com/security/cve/CVE-2026-55797"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-71556",
"url": "https://access.redhat.com/security/cve/CVE-2026-71556"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84375",
"url": "https://access.redhat.com/security/cve/CVE-2026-84375"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.21/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.21/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90337.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.6 security update",
"tracking": {
"current_release_date": "2026-11-04T15:54:42+00:00",
"generator": {
"date": "2026-11-04T15:54:42+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.4"
}
},
"id": "RHSA-2026:90337",
"initial_release_date": "2026-10-26T14:56:47+00:00",
"revision_history": [
{
"date": "2026-10-26T14:56:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-11-02T15:24:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-04T15:54:42+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift GitOps 1.21",
"product": {
"name": "Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_gitops:1.21::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift GitOps"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel9@sha256%3A1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1792368096"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel9@sha256%3A7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1792378341"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3Aae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1792368409"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel9@sha256%3Ad333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1792368103"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel9@sha256%3A7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1792368056"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1792368247"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel9@sha256%3A5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1792368283"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9@sha256%3A855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1792368118"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9-operator@sha256%3A6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1792368014"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3Ae5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1792367922"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel9@sha256%3A2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1792378341"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3Ac5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1792368409"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel9@sha256%3A0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1792368103"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel9@sha256%3A912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1792368056"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1792368247"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel9@sha256%3A7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1792368283"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel9@sha256%3Ac62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1792368096"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9@sha256%3A85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1792368118"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9-operator@sha256%3Acc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1792368014"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-operator-bundle@sha256%3A09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-operator-bundle\u0026tag=1792381097"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3Acac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1792367922"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel9@sha256%3Ade9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1792378341"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3Ac1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1792368409"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel9@sha256%3A521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1792368103"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel9@sha256%3A1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1792368056"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1792368247"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel9@sha256%3A03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1792368283"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel9@sha256%3A8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1792368096"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9@sha256%3A12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1792368118"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9-operator@sha256%3A83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1792368014"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1792367922"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel9@sha256%3A438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1792378341"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1792368409"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel9@sha256%3A96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1792368103"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel9@sha256%3A02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1792368056"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1792368247"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel9@sha256%3A7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1792368283"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel9@sha256%3A54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1792368096"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9@sha256%3Aa57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1792368118"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel9-operator@sha256%3Acaabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1792368014"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1792367922"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64 as a component of Red Hat OpenShift GitOps 1.21",
"product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-55797",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command"
},
"discovery_date": "2026-10-09T17:01:54.912268+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548730"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Argo CD\u0027s repository server component. An authenticated user with permissions to create or update repository configurations can supply a crafted proxy address containing special characters for an SSH (Secure Shell) repository. Because the server processes this proxy address directly through a system shell without proper sanitization, an attacker can execute arbitrary commands on the repository server and access stored credentials.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/argoproj/argo-cd/v3: github.com/argoproj/argo-cd/v2: argo-cd: Arbitrary command execution via crafted SSH repository proxy configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because authenticated users with permissions to manage repository definitions can achieve arbitrary code execution inside the Argo CD repository server pod and access sensitive infrastructure credentials. In Red Hat OpenShift GitOps environments, successful exploitation requires authorization to add or modify repository configurations or credential templates, restricting the threat to privileged accounts. Although arbitrary commands execute within the repo-server pod context, standard OpenShift security context constraints and container boundaries prevent direct privilege escalation to the underlying cluster node.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55797"
},
{
"category": "external",
"summary": "RHBZ#2548730",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548730"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55797",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55797"
},
{
"category": "external",
"summary": "https://github.com/argoproj/argo-cd/commit/1e3ddd0b7250aa23f489956b5fab8c13d0493a9f",
"url": "https://github.com/argoproj/argo-cd/commit/1e3ddd0b7250aa23f489956b5fab8c13d0493a9f"
},
{
"category": "external",
"summary": "https://github.com/argoproj/argo-cd/commit/9b27aeb1a4fb15d11a0f01cad65dea1fdfc60205",
"url": "https://github.com/argoproj/argo-cd/commit/9b27aeb1a4fb15d11a0f01cad65dea1fdfc60205"
},
{
"category": "external",
"summary": "https://github.com/argoproj/argo-cd/pull/15864",
"url": "https://github.com/argoproj/argo-cd/pull/15864"
},
{
"category": "external",
"summary": "https://github.com/argoproj/argo-cd/releases/tag/v3.3.15",
"url": "https://github.com/argoproj/argo-cd/releases/tag/v3.3.15"
},
{
"category": "external",
"summary": "https://github.com/argoproj/argo-cd/releases/tag/v3.4.10",
"url": "https://github.com/argoproj/argo-cd/releases/tag/v3.4.10"
},
{
"category": "external",
"summary": "https://github.com/argoproj/argo-cd/releases/tag/v3.5.4",
"url": "https://github.com/argoproj/argo-cd/releases/tag/v3.5.4"
},
{
"category": "external",
"summary": "https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2",
"url": "https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2"
},
{
"category": "external",
"summary": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-j6cw-g6p4-7hch",
"url": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-j6cw-g6p4-7hch"
}
],
"release_date": "2026-10-09T16:43:35.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T14:56:47+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90337"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/argoproj/argo-cd/v3: github.com/argoproj/argo-cd/v2: argo-cd: Arbitrary command execution via crafted SSH repository proxy configuration"
},
{
"cve": "CVE-2026-71556",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access"
},
"discovery_date": "2026-08-07T16:51:14.251077+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2512562"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink, which, when cloned and its worktree operations are used, can lead to reading from or writing to arbitrary files outside the intended working directory. This could result in information disclosure or arbitrary file modification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "go-git is a pure-Go implementation of Git. During worktree operations (checkout, status, add), go-git resolves symbolic links without confining resolution to the worktree boundary, so a maliciously crafted repository containing a symlink can cause a consuming application to read from or write to files outside the intended working directory when that repository is cloned and its worktree operations are used. Exploitation requires the application to clone an attacker-controlled repository and then perform worktree operations against it; applications that only process trusted repositories are not exposed. Red Hat rates the impact of this flaw as Important.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-71556"
},
{
"category": "external",
"summary": "RHBZ#2512562",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512562"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-71556",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71556"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71556",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71556"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab",
"url": "https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac",
"url": "https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-git/releases/tag/v5.19.2",
"url": "https://github.com/go-git/go-git/releases/tag/v5.19.2"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.5",
"url": "https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.5"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm",
"url": "https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm"
}
],
"release_date": "2026-08-07T16:37:40.058000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T14:56:47+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90337"
},
{
"category": "workaround",
"details": "To reduce the risk of exploitation, do not clone or run worktree operations (checkout, status, add) on Git repositories originating from untrusted or attacker-controllable sources using an affected version of go-git. The issue is resolved by updating to go-git 5.19.2 or 6.0.0-alpha.5 (or later).",
"product_ids": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution"
},
{
"cve": "CVE-2026-84375",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition"
},
"discovery_date": "2026-09-01T21:51:30.205823+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527118"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in js-yaml, affecting applications that process untrusted YAML input. The flaw allows an attacker to craft a small YAML document that, when parsed, can lead to prolonged CPU consumption due to inefficient merge key processing, potentially exhausting system resources. This is particularly relevant where applications handle external YAML data and have merge processing enabled by default.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84375"
},
{
"category": "external",
"summary": "RHBZ#2527118",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527118"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84375"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639",
"url": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480",
"url": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b",
"url": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/pull/797",
"url": "https://github.com/nodeca/js-yaml/pull/797"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2",
"url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2",
"url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh"
}
],
"release_date": "2026-09-01T21:43:13.617000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T14:56:47+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90337"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:2759038396205da90b7a1952af34eefdad87b3d4bf830ac9a6a4f2942b2c4bff_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:438790d1ffdfe5277ba985b4c483e35a3a2656d4c42b26eebfdcc60605f2a83d_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c2e4bf8757fd3fedbddff40ab58c1fc0da522e1fed6da3c2edc216c5a19db12_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9261d376df9009bcfeb44b37de4aabb8f4a9ac5243b6199d3bd33b3712feea_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0526d72efa2c6a2bd253c6862be593f5a91bc1d97dcc1065077d80584f20dd8a_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:521bf616e37f41080006284360803f05ea9e0ed08f79ae929b34ebf5c757f8f9_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:96acc202f04bcb4400ce7c5c0a3ca294805bdf9dbf98ac86f2de0e08391e3511_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d333deedf0a6c9e80da3df4ea487e25b784ffcb2af4b7066b2d1bfe1014882f9_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:02e66b6fabf20ed2890ab5df72fbb964efe52de67f2df5a4b5b5b1e060f78de0_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:1711ba52beb36f208c4b8728618af62532c786a2d96069c1572e50fe52ef6cdc_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7fcf0ee19ad47e8f9f5edb017f02b421b1d6c7a4be186a10419624294cefde77_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:912d47f071d80692676774f2b472c48bfa7486db387be7485a2c3e5d5616f844_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1d872eef6c383c0b262df634a8e0c5373a7babcbcd889f91586447145d6def46_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1eed64dd210e2f59ccb5d5dfdc2b6013d38eb09b8ecd74bf3c3f5f41b18d92ff_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:4495608cbd4f210a6da006637af038309068dfbbc4050194981b5538f918ba5b_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:8d6af8de8ff2d4fe73d1f1d2eb9007c21535f2b2e1912d1190b76e03ff904c38_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:40c928497d623c6cbe4eaf4c21551496bbfad533f5e81e8f1859e6d91fd0fc7e_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ae083f48307fb7ced86766aec305d243790b19c1a179b39e256cd471852917df_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c1c4c5eea9d41cbf300757b66687df50f3fcf75a3ae5715c81b1f616cb053a86_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c5206999c0144920a8412c2bd83c4db72b7adcb23286ed55a397abc960ab1973_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:03aa690b5bbd6b617665da47a3d2fcf39ba8633b21b204112e825b39ffe309b7_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:5efe4e2f9c43c23bccc95a264c19ee00f71d01918ea4c351cfdecffa62761b55_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7145d3b966c77904a47c9994d2897b7777cc4db55c0f200d35016baab328db75_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7c15ef03a1b609907c4380c753cab84262201fe98cb4c643e9cbb7c089db0b56_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:1e60575663a7afac1eba4bad1c9411084a58adaed0bdda982d560fefb7960345_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:54ec9fabb8a21f8a2c2c51b2a4a51e35a2cc23e89c614dcff5e6f07be70bf640_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8339244b3b9519f97f0c0993e63fd9ead42ee9dec2ff03780dd7477096ffe6bb_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c62f6420b0bd0fb3392608df5ff227b0b71551bb1b1f2164d3362f1064164f33_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:09637c340cfc3e6358ce9270eaf4e90752cc631ad5ea299a17de52e1a89657f7_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:6bfa61743a07bdec75c605e3274ea2b08d3b52e9da33fac30af5638c9f9d85b1_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:83509bac5126699469050d7e18882d4e4b2717655db226713bc20819e1d4fe14_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:caabc9d91925ba216f86aa03331c3b14f9c330672dbee71c5d8ae490514d6778_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:cc935c87f0cd29b5beacf996a41a8e32dc25f135f0550cfcca1c24c3901af326_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:12c621b6150dee11d1a36ff1402e127fc03c132b0bc899a6aa8f7d254d931d30_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:855205a96e3f89396a4b1b0e3cb108c04fff53909a31ef73e654fec9d6b3b59d_arm64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:85fd3313db8ba2bd8988b6885b28bca03ee53ebd1f051bd7376f1cbfc9719fcc_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:a57f9079fc691c51a7939c980dfe5bcae28381fd863fb39a63d60f04adf6c6f8_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:28742818c11cc4c18aa97c29edb0162e77bde25d72bf7ec5899635bb2b127dcf_s390x",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:71647ebf9c4c52cf28236018eebf39513d4ab93b725e8a828ca694b79989bc21_ppc64le",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:cac1da9a621db9d13f4b802875e2f1da23e29a56177cd77c124bdfd6c4c73ee8_amd64",
"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e5266f641f07edc1f4bf5ab9f92d1f244980bece69267456801f330af4ba40c6_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.