RHSA-2024:8581
Vulnerability from csaf_redhat - Published: 2024-10-29 19:12 - Updated: 2026-03-18 03:20Summary
Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.13.2 security update
Notes
Topic
An update is now available for Red Hat OpenShift GitOps v1.13.2. Red Hat
Product Security has rated this update as having a security impact of Moderate.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Errata Advisory for Red Hat OpenShift GitOps v1.13.2.
Security Fix(es):
* openshift-gitops-argocd-container: Denial of Service Vulnerability in body-parser [gitops-1.13](CVE-2024-45590)
* openshift-gitops-argocd-container: Improper Input Handling in Express Redirects [gitops-1.13](CVE-2024-43796)
* openshift-gitops-argocd-container: Backtracking regular expressions cause ReDoS [gitops-1.13](CVE-2024-45296)
* openshift-gitops-argocd-container: Improper Sanitization in serve-static [gitops-1.13](CVE-2024-43800)
* openshift-gitops-argocd-container: Code Execution Vulnerability in Send Library [gitops-1.13](CVE-2024-43799)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat OpenShift GitOps v1.13.2. Red Hat\nProduct Security has rated this update as having a security impact of Moderate.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Errata Advisory for Red Hat OpenShift GitOps v1.13.2.\n\nSecurity Fix(es):\n\n* openshift-gitops-argocd-container: Denial of Service Vulnerability in body-parser [gitops-1.13](CVE-2024-45590)\n* openshift-gitops-argocd-container: Improper Input Handling in Express Redirects [gitops-1.13](CVE-2024-43796)\n* openshift-gitops-argocd-container: Backtracking regular expressions cause ReDoS [gitops-1.13](CVE-2024-45296)\n* openshift-gitops-argocd-container: Improper Sanitization in serve-static [gitops-1.13](CVE-2024-43800)\n* openshift-gitops-argocd-container: Code Execution Vulnerability in Send Library [gitops-1.13](CVE-2024-43799)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:8581",
"url": "https://access.redhat.com/errata/RHSA-2024:8581"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "GITOPS-4234",
"url": "https://issues.redhat.com/browse/GITOPS-4234"
},
{
"category": "external",
"summary": "GITOPS-4358",
"url": "https://issues.redhat.com/browse/GITOPS-4358"
},
{
"category": "external",
"summary": "GITOPS-5081",
"url": "https://issues.redhat.com/browse/GITOPS-5081"
},
{
"category": "external",
"summary": "GITOPS-5087",
"url": "https://issues.redhat.com/browse/GITOPS-5087"
},
{
"category": "external",
"summary": "GITOPS-5640",
"url": "https://issues.redhat.com/browse/GITOPS-5640"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8581.json"
}
],
"title": "Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.13.2 security update",
"tracking": {
"current_release_date": "2026-03-18T03:20:11+00:00",
"generator": {
"date": "2026-03-18T03:20:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.3"
}
},
"id": "RHSA-2024:8581",
"initial_release_date": "2024-10-29T19:12:21+00:00",
"revision_history": [
{
"date": "2024-10-29T19:12:21+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-10-29T19:12:21+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-03-18T03:20:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift GitOps 1.13",
"product": {
"name": "Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_gitops:1.13::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenShift GitOps 1.13",
"product": {
"name": "Red Hat OpenShift GitOps 1.13",
"product_id": "9Base-GitOps-1.13",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_gitops:1.13::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift GitOps"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"product": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"product_id": "openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"product": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"product_id": "openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"product": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"product": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"product_id": "openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"product": {
"name": "openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"product_id": "openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"product": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"product": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"product_id": "openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"product": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.13.2-4"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"product": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"product_id": "openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"product": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"product_id": "openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"product": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"product": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"product_id": "openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"product": {
"name": "openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"product_id": "openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"product": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"product": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"product_id": "openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"product": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.13.2-4"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"product": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"product_id": "openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"product": {
"name": "openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"product_id": "openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=v1.13.2-5"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"product": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"product_id": "openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"product": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"product": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"product_id": "openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"product": {
"name": "openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"product_id": "openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"product": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"product": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"product_id": "openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"product": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.13.2-4"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"product": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"product_id": "openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64",
"product": {
"name": "openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64",
"product_id": "openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=v1.13.2-5"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"product": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"product_id": "openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"product": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"product": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"product_id": "openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"product": {
"name": "openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"product_id": "openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"product": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"product": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"product_id": "openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"product": {
"name": "openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"product_id": "openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-operator-bundle\u0026tag=v1.13.2-4"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"product": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.13.2-4"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le"
},
"product_reference": "openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x"
},
"product_reference": "openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64"
},
"product_reference": "openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64"
},
"product_reference": "openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64"
},
"product_reference": "openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64"
},
"product_reference": "openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le"
},
"product_reference": "openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x"
},
"product_reference": "openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64"
},
"product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x"
},
"product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64"
},
"product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le"
},
"product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64"
},
"product_reference": "openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le"
},
"product_reference": "openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64"
},
"product_reference": "openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x"
},
"product_reference": "openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64"
},
"product_reference": "openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64"
},
"product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le"
},
"product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64"
},
"product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x"
},
"product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64"
},
"product_reference": "openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le"
},
"product_reference": "openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x"
},
"product_reference": "openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64"
},
"product_reference": "openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64"
},
"product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64"
},
"product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x"
},
"product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le"
},
"product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x"
},
"product_reference": "openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64"
},
"product_reference": "openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64"
},
"product_reference": "openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le"
},
"product_reference": "openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64"
},
"product_reference": "openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"relates_to_product_reference": "9Base-GitOps-1.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64 as a component of Red Hat OpenShift GitOps 1.13",
"product_id": "9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
},
"product_reference": "openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64",
"relates_to_product_reference": "9Base-GitOps-1.13"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-26115",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2023-06-22T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2216827"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Node.js word-wrap module, where it is vulnerable to a denial of service caused by a Regular expression denial of service (ReDoS) issue in the result variable. By sending a specially crafted regex input, a remote attacker can cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "word-wrap: ReDoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le"
],
"known_not_affected": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-26115"
},
{
"category": "external",
"summary": "RHBZ#2216827",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2216827"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-26115",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26115"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-26115",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-26115"
}
],
"release_date": "2023-06-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-29T19:12:21+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8581"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "word-wrap: ReDoS"
},
{
"cve": "CVE-2024-43796",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2024-09-10T15:30:28.106254+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2311152"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Express. This vulnerability allows untrusted code execution via passing untrusted user input to response.redirect(), even if the input is sanitized.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "express: Improper Input Handling in Express Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43796"
},
{
"category": "external",
"summary": "RHBZ#2311152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2311152"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43796",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43796"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43796",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43796"
},
{
"category": "external",
"summary": "https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553",
"url": "https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553"
},
{
"category": "external",
"summary": "https://github.com/expressjs/express/security/advisories/GHSA-qw6h-vgh9-j6wx",
"url": "https://github.com/expressjs/express/security/advisories/GHSA-qw6h-vgh9-j6wx"
}
],
"release_date": "2024-09-10T15:15:17.510000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-29T19:12:21+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8581"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "express: Improper Input Handling in Express Redirects"
},
{
"cve": "CVE-2024-43799",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2024-09-10T15:30:30.869487+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2311153"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Send library. This vulnerability allows remote code execution via untrusted input passed to the SendStream.redirect() function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "send: Code Execution Vulnerability in Send Library",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43799"
},
{
"category": "external",
"summary": "RHBZ#2311153",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2311153"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43799",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43799"
},
{
"category": "external",
"summary": "https://github.com/pillarjs/send/commit/ae4f2989491b392ae2ef3b0015a019770ae65d35",
"url": "https://github.com/pillarjs/send/commit/ae4f2989491b392ae2ef3b0015a019770ae65d35"
},
{
"category": "external",
"summary": "https://github.com/pillarjs/send/security/advisories/GHSA-m6fv-jmcg-4jfg",
"url": "https://github.com/pillarjs/send/security/advisories/GHSA-m6fv-jmcg-4jfg"
}
],
"release_date": "2024-09-10T15:15:17.727000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-29T19:12:21+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8581"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "send: Code Execution Vulnerability in Send Library"
},
{
"cve": "CVE-2024-43800",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2024-09-10T15:30:33.631718+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2311154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in serve-static. This issue may allow the execution of untrusted code via passing sanitized yet untrusted user input to redirect().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "serve-static: Improper Sanitization in serve-static",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "rhdh-hub-container 1.2 and 1.3 have included patches for this vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43800"
},
{
"category": "external",
"summary": "RHBZ#2311154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2311154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43800",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43800"
},
{
"category": "external",
"summary": "https://github.com/expressjs/serve-static/commit/0c11fad159898cdc69fd9ab63269b72468ecaf6b",
"url": "https://github.com/expressjs/serve-static/commit/0c11fad159898cdc69fd9ab63269b72468ecaf6b"
},
{
"category": "external",
"summary": "https://github.com/expressjs/serve-static/commit/ce730896fddce1588111d9ef6fdf20896de5c6fa",
"url": "https://github.com/expressjs/serve-static/commit/ce730896fddce1588111d9ef6fdf20896de5c6fa"
},
{
"category": "external",
"summary": "https://github.com/expressjs/serve-static/security/advisories/GHSA-cm22-4g7w-348p",
"url": "https://github.com/expressjs/serve-static/security/advisories/GHSA-cm22-4g7w-348p"
}
],
"release_date": "2024-09-10T15:15:17.937000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-29T19:12:21+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8581"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "serve-static: Improper Sanitization in serve-static"
},
{
"cve": "CVE-2024-45296",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-09-09T19:20:18.127723+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310908"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp package, where it turns path strings into regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single-threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: Backtracking regular expressions cause ReDoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45296"
},
{
"category": "external",
"summary": "RHBZ#2310908",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310908"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45296",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45296"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45296",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45296"
},
{
"category": "external",
"summary": "https://github.com/pillarjs/path-to-regexp/commit/29b96b4a1de52824e1ca0f49a701183cc4ed476f",
"url": "https://github.com/pillarjs/path-to-regexp/commit/29b96b4a1de52824e1ca0f49a701183cc4ed476f"
},
{
"category": "external",
"summary": "https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6",
"url": "https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6"
},
{
"category": "external",
"summary": "https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598j",
"url": "https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598j"
}
],
"release_date": "2024-09-09T19:15:13.330000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-29T19:12:21+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8581"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "path-to-regexp: Backtracking regular expressions cause ReDoS"
},
{
"cve": "CVE-2024-45590",
"cwe": {
"id": "CWE-405",
"name": "Asymmetric Resource Consumption (Amplification)"
},
"discovery_date": "2024-09-10T16:20:29.292154+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2311171"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in body-parser. This vulnerability causes denial of service via a specially crafted payload when the URL encoding is enabled.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "body-parser: Denial of Service Vulnerability in body-parser",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45590"
},
{
"category": "external",
"summary": "RHBZ#2311171",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2311171"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45590",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45590"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45590",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45590"
},
{
"category": "external",
"summary": "https://github.com/expressjs/body-parser/commit/b2695c4450f06ba3b0ccf48d872a229bb41c9bce",
"url": "https://github.com/expressjs/body-parser/commit/b2695c4450f06ba3b0ccf48d872a229bb41c9bce"
},
{
"category": "external",
"summary": "https://github.com/expressjs/body-parser/security/advisories/GHSA-qwcr-r2fm-qrc7",
"url": "https://github.com/expressjs/body-parser/security/advisories/GHSA-qwcr-r2fm-qrc7"
}
],
"release_date": "2024-09-10T16:15:21.083000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-29T19:12:21+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8581"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/kam-delivery-rhel8@sha256:f9eec77cbd6b63388c1d1a37949858668a226199dd20846687c30f9bf11e2a8b_ppc64le",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:68610ad818e682bd959a63e5b019c5a249a23afe788d227108f541a107af0e5e_arm64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64",
"8Base-GitOps-1.13:openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64",
"9Base-GitOps-1.13:openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "body-parser: Denial of Service Vulnerability in body-parser"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…