RHSA-2026:20943
Vulnerability from csaf_redhat - Published: 2026-05-26 14:49 - Updated: 2026-05-27 16:00Summary
Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.4 security update
Severity
Important
Notes
Topic: Important: Red Hat OpenShift GitOps v1.19.4 security update
Details: An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):
* GITOPS-8784 (Service-CA annotation removed from argocd-server Service during v1.12.3 -> v1.12.4 upgrade path, persists in later versions)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in goxmlsig, a Go library for XML Digital Signatures. This vulnerability arises from a programming error, specifically a loop variable capture issue, within the `validateSignature` function. When processing XML Digital Signatures, this error can cause the system to incorrectly validate the signature, potentially allowing an attacker to bypass integrity checks. This issue affects Go versions before 1.22 or projects using older `go.mod` configurations.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Argo CD, a GitOps continuous delivery tool for Kubernetes. A missing authorization and data-masking gap in the ServerSideDiff endpoint allows an attacker with read-only access to extract sensitive Kubernetes Secret data. This information disclosure occurs by leveraging the Kubernetes API server's Server-Side Apply dry-run mechanism, potentially exposing critical configuration and credentials.
7.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64 | — |
Workaround
|
Threats
Impact
Important
References
39 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Important: Red Hat OpenShift GitOps v1.19.4 security update",
"title": "Topic"
},
{
"category": "general",
"text": "An update is now available for Red Hat OpenShift GitOps.\nBug Fix(es) and Enhancement(s):\n* GITOPS-8784 (Service-CA annotation removed from argocd-server Service during v1.12.3 -\u003e v1.12.4 upgrade path, persists in later versions)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:20943",
"url": "https://access.redhat.com/errata/RHSA-2026:20943"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33487",
"url": "https://access.redhat.com/security/cve/CVE-2026-33487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42880",
"url": "https://access.redhat.com/security/cve/CVE-2026-42880"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.19/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.19/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20943.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.4 security update",
"tracking": {
"current_release_date": "2026-05-27T16:00:03+00:00",
"generator": {
"date": "2026-05-27T16:00:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.1"
}
},
"id": "RHSA-2026:20943",
"initial_release_date": "2026-05-26T14:49:30+00:00",
"revision_history": [
{
"date": "2026-05-26T14:49:30+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-26T14:49:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-05-27T16:00:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift GitOps 1.19",
"product": {
"name": "Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_gitops:1.19::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift GitOps"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3Ab6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1779210058"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1779211724"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3Ae9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1779210454"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1779209907"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3A4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8\u0026tag=1779211412"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1779211476"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3A867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1779210530"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1779209965"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1779210473"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3Af5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1779210442"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-operator-bundle@sha256%3Ac41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-operator-bundle\u0026tag=1779213632"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3Afd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1779209869"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1779210058"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1779211724"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3A7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1779210454"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1779209907"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3Ac769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8\u0026tag=1779211412"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1779211476"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3Ade5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1779210530"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1779209965"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3Aff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1779210473"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3A71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1779210442"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1779209869"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1779210058"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1779211724"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3Af9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1779210454"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1779209907"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3A021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8\u0026tag=1779211412"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3Aef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1779211476"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3Ac3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1779210530"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3Ac1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1779209965"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1779210473"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3A4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1779210442"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1779209869"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=1779210058"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=1779211724"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3A474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8\u0026tag=1779210454"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3Aaacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8\u0026tag=1779209907"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-image-updater-rhel8@sha256%3A0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8\u0026tag=1779211412"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1779211476"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3A781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=1779210530"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3Aa8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=1779209965"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3Aa02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=1779210473"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3A5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=1779210442"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3Af0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=1779209869"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64 as a component of Red Hat OpenShift GitOps 1.19",
"product_id": "Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:49:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20943"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:49:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20943"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:49:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20943"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33487",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-26T18:02:32.278778+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451814"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in goxmlsig, a Go library for XML Digital Signatures. This vulnerability arises from a programming error, specifically a loop variable capture issue, within the `validateSignature` function. When processing XML Digital Signatures, this error can cause the system to incorrectly validate the signature, potentially allowing an attacker to bypass integrity checks. This issue affects Go versions before 1.22 or projects using older `go.mod` configurations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33487"
},
{
"category": "external",
"summary": "RHBZ#2451814",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451814"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33487"
},
{
"category": "external",
"summary": "https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-479m-364c-43vc",
"url": "https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-479m-364c-43vc"
}
],
"release_date": "2026-03-26T17:17:51.101000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:49:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20943"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue"
},
{
"cve": "CVE-2026-42880",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-05-07T23:00:58.796407+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467882"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Argo CD, a GitOps continuous delivery tool for Kubernetes. A missing authorization and data-masking gap in the ServerSideDiff endpoint allows an attacker with read-only access to extract sensitive Kubernetes Secret data. This information disclosure occurs by leveraging the Kubernetes API server\u0027s Server-Side Apply dry-run mechanism, potentially exposing critical configuration and credentials.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "argoproj/argo-cd: Argo CD: Information disclosure of Kubernetes Secret data via Server-Side Apply dry-run mechanism",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42880"
},
{
"category": "external",
"summary": "RHBZ#2467882",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467882"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42880",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42880"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42880",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42880"
},
{
"category": "external",
"summary": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3",
"url": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3"
}
],
"release_date": "2026-05-07T22:20:39.506000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:49:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20943"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:093d586a268c1129068c4c92ce4e23de78bf72944a392beaa46bd2364ca0336b_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:12cfb7c85072330ccc14faa278f2dcc4ce87972fa46432ba00c609c3656e092d_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:4770392a4f37b9e8b6f8d8a37748243fbf4f63eabc4125b0e31f55f927b4598f_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b6773a29fc3d9504143f9aed3438781e04b4262a4ac46d1926f2ce76c87ad0c9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:474bf4e9a76c93e3983695ce125a7836d5bd0bde611bbb48b8b5b8be721b15de_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7078ad00e7f3573c36de3bd2b970d77e9d4445f810d4d65f2fb19286f4e9d89f_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:e9feb44bbe30da9b742c50d01de7768b1e452384fa11a65c689ee7d128fa56da_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f9ee62dc4533db9cde78c7595efc92cb708d31263dad4c7572af141ceb0a385e_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:084929fa28329d1382a0667a61e83e349f55369d80f71ef2f6af8a88dcda19d1_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c72e0769629dafa087f03221987ba896604d4e136fbf9a28666b9c55c8d987c_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:63cbd262105c2b5a0173f842a879fc5a036e52578bd48af9bc470eb48a660595_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aacb1fd3d0cd707059b4f94730c1f8cdc84ba8442e52299480d87eaa0350dfeb_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:0c81eedce2f08c304fea9aa8662fed9f845ac13638bca8f5a9b1684819dc207e_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:4c0a72935660b5f38b9c981432195892853e798e0c07e637bd9e3bcf90e12987_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:c769040e7b362ea4918e077b1481b1059fbf5d762b8e2444631d3e08d391434a_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:5919feb409837ec88c5197df633639a697c5ec6138cd2620f1f452ef5a3bd365_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:66c18c542c66eb54f38c8c22ca7ee83b14dfaf4c89525a4958cece1c608d9997_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:990bcf2561d70247f42cfac2d9ed81bad938f113a79e4c254c07a6b25a3f4074_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9e1f91b60724585e27ec0ddc860eb359d22f4a4c13369b453a4aec4c7e05f319_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1b7901e494b7274e5fe66969d535e7e8e104b0a1d922830264b63cd011aee636_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2d7b4f9c6cc56113f6fbf280906ad12800cd6000c6176b8da23749477d51e5f6_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:37b2555153f4260511bb69e79c877661edf4f54a91c235255d0fa7620e114256_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ef149f4672aa43d14957cdc42c5bdea2e3a42ae00b28b5b12dcd4939f7efcd40_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:781e28a4fd1e3e49d0964a7cc23f35419ef82a8b58681fed0b52c959a796abe9_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:867432aa79ea7b612d90e6a6a2e3a16cb14f9d4a0ad22f2358f2809cb717e8a9_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c3a631bdb8c4805a7a82cf3a81b010a2dd4fb837e9cddf3bad0720c6307c2996_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:de5acfcacf2d7ddc3a32c3eb8ca542d52bbe59b2fcd06b88b0e1a2508d539635_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:12c586d1f3bfb82db15f63f066fa1aa1745939fce43d6f811210f46b098550fa_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:38527ce3011bfa09a8764727233977519acaefd795c7b177eb8cda5fbe052628_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a8964feb57a233ad7cafd9a95136acecd1bc78cf538a2725aceb8446bd0b96c2_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c1eb1813dc1a5936727f0127d8515114d990e0b2afd7f1104c7b8b3cae26bcce_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:c41e74df4743068317457d2db0209e08be023758add611f49769900e58299a93_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:4faa0e4d78fe939ba1feb445bb58512ace91cbe27c09700f18ea04c52085b824_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5e4639ee0f9205d3d23b9bb6e619b9486380242c10a0322372f0c050a49cd26f_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:71a3c5c90900a45901d2a692ebe54f1701a80ca68a6d2f56176e9b318156a441_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:f5225ac218e3b2c0a5a83cbca02102199ae9ee8d3befe2aa51c38ed7218ed59c_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:0c76d940d937526e6d31d4eb836b15a161f03cbe75321744bb5f48439e932693_amd64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:6ed96a4f70d576b146dc9d95eea340001d2c41f815f145a5aa26d6578ab09f79_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:a02d6193b4dbc71db4dd298912e770769619cf9350bf9b765427d979014a2327_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:ff1158972bba8529764f3263191ea64d84f9243ebd5b7db51497b1daa57177ba_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:63026c01695ae0adb5ce36116198a3fe13007139d7bf9f3b46f617a3c608f04e_arm64",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:804d00db5272cc3cf81aeae51dd561659782ccd0ef9e6e0b50e9f7e3531496f6_ppc64le",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:f0e3a4dd6fcc53ea7dd01da97ce572b621e085e2e0097e931a61c5a06a972add_s390x",
"Red Hat OpenShift GitOps 1.19:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd60effbb7119ef8c9adc580ae8d6751e2ccba7ce0463e604573e8c284d8eb3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "argoproj/argo-cd: Argo CD: Information disclosure of Kubernetes Secret data via Server-Side Apply dry-run mechanism"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…