{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Multicluster Global Hub v1.3.4 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:22423",
        "url": "https://access.redhat.com/errata/RHSA-2026:22423"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-21728",
        "url": "https://access.redhat.com/security/cve/CVE-2026-21728"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25679"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27137"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32283"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32285",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32285"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32286",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32286"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33487",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33487"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33815",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33815"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33816",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33816"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34986"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41602",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41602"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41603",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41603"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41604",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41604"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41605",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41605"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41606",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41606"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41607",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41607"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41636",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41636"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-43869",
        "url": "https://access.redhat.com/security/cve/CVE-2026-43869"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22423.json"
      }
    ],
    "title": "Red Hat Security Advisory: Multicluster Global Hub 1.3.4 security update",
    "tracking": {
      "current_release_date": "2026-06-02T23:50:44+00:00",
      "generator": {
        "date": "2026-06-02T23:50:44+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2026:22423",
      "initial_release_date": "2026-06-02T07:42:09+00:00",
      "revision_history": [
        {
          "date": "2026-06-02T07:42:09+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-02T07:42:14+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-02T23:50:44+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Multicluster Global Hub 1.3.4",
                "product": {
                  "name": "Multicluster Global Hub 1.3.4",
                  "product_id": "Multicluster Global Hub 1.3.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:multicluster_globalhub:1.3::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Multicluster Global Hub"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1779212259"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1779210675"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1779210608"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3Aa1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1779925031"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Adebed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1779209992"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1779924243"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1779212259"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1779210675"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Ae8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1779210608"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Adced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1779209992"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1779924243"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1779212259"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1779210675"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1779210608"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1779209992"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1779924243"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1779212259"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1779210675"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1779210608"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1779209992"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3Ad5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1779924243"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64 as a component of Multicluster Global Hub 1.3.4",
          "product_id": "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.3.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-21728",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-24T09:00:58.144273+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2461395"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Tempo. A remote attacker can exploit this vulnerability by sending large queries to the Tempo service. This can lead to excessive memory allocations, potentially causing a Denial of Service (DoS) by impacting the availability of the service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "grafana/tempo: Tempo: Denial of Service via large queries",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-21728"
        },
        {
          "category": "external",
          "summary": "RHBZ#2461395",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461395"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-21728",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-21728"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21728",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21728"
        },
        {
          "category": "external",
          "summary": "https://grafana.com/security/security-advisories/cve-2026-21728",
          "url": "https://grafana.com/security/security-advisories/cve-2026-21728"
        }
      ],
      "release_date": "2026-04-24T08:00:47.074000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "grafana/tempo: Tempo: Denial of Service via large queries"
    },
    {
      "cve": "CVE-2026-25679",
      "cwe": {
        "id": "CWE-1286",
        "name": "Improper Validation of Syntactic Correctness of Input"
      },
      "discovery_date": "2026-03-06T22:02:11.567841+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445356"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445356",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/752180",
          "url": "https://go.dev/cl/752180"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77578",
          "url": "https://go.dev/issue/77578"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
          "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4601",
          "url": "https://pkg.go.dev/vuln/GO-2026-4601"
        }
      ],
      "release_date": "2026-03-06T21:28:14.211000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
    },
    {
      "cve": "CVE-2026-27137",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-03-06T22:01:38.859733+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445345"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27137"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445345",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/752182",
          "url": "https://go.dev/cl/752182"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77952",
          "url": "https://go.dev/issue/77952"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
          "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4599",
          "url": "https://pkg.go.dev/vuln/GO-2026-4599"
        }
      ],
      "release_date": "2026-03-06T21:28:13.748000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
    },
    {
      "cve": "CVE-2026-32282",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-04-08T02:01:12.683211+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456336"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456336",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763761",
          "url": "https://go.dev/cl/763761"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78293",
          "url": "https://go.dev/issue/78293"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4864",
          "url": "https://pkg.go.dev/vuln/GO-2026-4864"
        }
      ],
      "release_date": "2026-04-08T01:06:55.953000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
    },
    {
      "cve": "CVE-2026-32283",
      "cwe": {
        "id": "CWE-764",
        "name": "Multiple Locks of a Critical Resource"
      },
      "discovery_date": "2026-04-08T02:01:16.213799+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456338"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456338",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763767",
          "url": "https://go.dev/cl/763767"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78334",
          "url": "https://go.dev/issue/78334"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4870",
          "url": "https://pkg.go.dev/vuln/GO-2026-4870"
        }
      ],
      "release_date": "2026-04-08T01:06:57.670000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
    },
    {
      "cve": "CVE-2026-32285",
      "cwe": {
        "id": "CWE-1285",
        "name": "Improper Validation of Specified Index, Position, or Offset in Input"
      },
      "discovery_date": "2026-03-26T20:01:54.925687+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451846"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32285"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451846",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451846"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32285",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32285"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285"
        },
        {
          "category": "external",
          "summary": "https://github.com/buger/jsonparser/issues/275",
          "url": "https://github.com/buger/jsonparser/issues/275"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang/vulndb/issues/4514",
          "url": "https://github.com/golang/vulndb/issues/4514"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4514",
          "url": "https://pkg.go.dev/vuln/GO-2026-4514"
        }
      ],
      "release_date": "2026-03-26T19:40:51.837000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input"
    },
    {
      "cve": "CVE-2026-32286",
      "cwe": {
        "id": "CWE-1285",
        "name": "Improper Validation of Specified Index, Position, or Offset in Input"
      },
      "discovery_date": "2026-03-26T20:01:59.226117+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451847"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the DataRow.Decode function within the github.com/jackc/pgproto3/v2 component. A malicious or compromised PostgreSQL server can exploit this by sending a DataRow message containing a negative field length. This improper validation of field lengths leads to a \"slice bounds out of range panic\", resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The PostgreSQL server multicluster-globalhub-manager connects to is either provisioned by the operator itself or specified by the admin managing the deployment. To successfully exploit the vulnerability in this context the attacker would need to compromise the operator-deployed PostgreSQL server to force a crafted malicious DataRow message or they would need to have the privileges required to modify the operator-provisioned deployment or configure globalhub-manager to use a compromised/malicious \u201cBYO Postgres\u201d server.\n\nThe first scenario (compromising a legitimate PostgreSQL server) would change Attack Complexity from Low to High resulting in an adjusted CVSS v3.1 score of 5.9 (Moderate)\nThe other scenarios (manipulating the operator provisioned-deployment or configuring the globalhub-manager to use a malicious server) would maintain AC:L but would require privileged access. This would change Privileges Required from None to High resulting in an adjusted CVSS v3.1 score of 4.9 (Moderate)\n\nBased on the above the Impact Rating for multicluster-globalhub-manager-rhel9 is  Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32286"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451847",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451847"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32286",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32286"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32286",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32286"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang/vulndb/issues/4518",
          "url": "https://github.com/golang/vulndb/issues/4518"
        },
        {
          "category": "external",
          "summary": "https://github.com/jackc/pgx/issues/2507",
          "url": "https://github.com/jackc/pgx/issues/2507"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4518",
          "url": "https://pkg.go.dev/vuln/GO-2026-4518"
        }
      ],
      "release_date": "2026-03-26T19:40:51.974000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server"
    },
    {
      "cve": "CVE-2026-33186",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-03-20T23:02:27.802640+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2449833"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "RHBZ#2449833",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
        }
      ],
      "release_date": "2026-03-20T22:23:32.147000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
    },
    {
      "cve": "CVE-2026-33487",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-03-26T18:02:32.278778+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451814"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in goxmlsig, a Go library for XML Digital Signatures. This vulnerability arises from a programming error, specifically a loop variable capture issue, within the `validateSignature` function. When processing XML Digital Signatures, this error can cause the system to incorrectly validate the signature, potentially allowing an attacker to bypass integrity checks. This issue affects Go versions before 1.22 or projects using older `go.mod` configurations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33487"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451814",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451814"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33487",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33487"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33487",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33487"
        },
        {
          "category": "external",
          "summary": "https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-479m-364c-43vc",
          "url": "https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-479m-364c-43vc"
        }
      ],
      "release_date": "2026-03-26T17:17:51.101000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue"
    },
    {
      "cve": "CVE-2026-33815",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-04-07T16:01:25.130006+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455975"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33815"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455975",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33815",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33815"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4771",
          "url": "https://pkg.go.dev/vuln/GO-2026-4771"
        }
      ],
      "release_date": "2026-04-07T15:19:24.344000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
    },
    {
      "cve": "CVE-2026-33816",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-04-07T16:01:14.142946+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455972"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33816"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455972",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4772",
          "url": "https://pkg.go.dev/vuln/GO-2026-4772"
        }
      ],
      "release_date": "2026-04-07T15:19:24.529000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
    },
    {
      "cve": "CVE-2026-34986",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-04-06T17:01:34.639203+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455470"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455470",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
          "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
          "url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
        }
      ],
      "release_date": "2026-04-06T16:22:45.353000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
    },
    {
      "cve": "CVE-2026-41602",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-28T10:01:16.099816+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463407"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Apache Thrift TFramedTransport Go language implementation. This integer overflow or wraparound vulnerability could potentially allow an attacker to cause unexpected behavior or resource exhaustion, leading to a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41602"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463407",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463407"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41602",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41602"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41602",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41602"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/28/6",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/28/6"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",
          "url": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"
        }
      ],
      "release_date": "2026-04-28T09:19:06.646000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation"
    },
    {
      "cve": "CVE-2026-41603",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-04-28T10:01:29.782287+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463411"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This vulnerability involves improper validation of server certificates, where the hostname presented in the certificate does not match the expected hostname. A remote attacker could exploit this to impersonate a legitimate server, potentially intercepting or altering sensitive communications and leading to unauthorized access or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache Thrift: apache.com/apache/thrift: Apache Thrift: Security Bypass via Improper Certificate Hostname Validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41603"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463411",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463411"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41603",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41603"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41603",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41603"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/28/7",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/28/7"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",
          "url": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"
        }
      ],
      "release_date": "2026-04-28T09:19:40.564000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache Thrift: apache.com/apache/thrift: Apache Thrift: Security Bypass via Improper Certificate Hostname Validation"
    },
    {
      "cve": "CVE-2026-41604",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-04-28T10:01:47.903741+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463416"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This out-of-bounds read vulnerability could allow an attacker to access memory outside of allocated bounds. This could lead to information disclosure or potentially a denial of service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41604"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463416",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463416"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41604",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41604"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41604",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41604"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/28/5",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/28/5"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",
          "url": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"
        }
      ],
      "release_date": "2026-04-28T09:20:13.996000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability"
    },
    {
      "cve": "CVE-2026-41605",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-28T10:01:54.269412+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463418"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This integer overflow or wraparound vulnerability could potentially lead to unexpected behavior or resource exhaustion, which may impact the availability or integrity of the system. The exact consequences depend on how the overflow is triggered and handled within the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache Thrift: Apache Thrift: Integer Overflow or Wraparound Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41605"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463418",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463418"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41605",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41605"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41605",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41605"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/28/4",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/28/4"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",
          "url": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"
        }
      ],
      "release_date": "2026-04-28T09:20:44.319000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache Thrift: Apache Thrift: Integer Overflow or Wraparound Vulnerability"
    },
    {
      "cve": "CVE-2026-41606",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-04-28T10:01:19.136351+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463408"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. An uncontrolled recursion vulnerability exists, which could allow a remote attacker to trigger a Denial of Service (DoS) condition. This occurs when the affected component processes specially crafted input, leading to excessive resource consumption and system unavailability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache Thrift: Apache Thrift: Denial of Service via uncontrolled recursion",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41606"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463408",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463408"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41606",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41606"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41606",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41606"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/28/3",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/28/3"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",
          "url": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"
        }
      ],
      "release_date": "2026-04-28T09:21:12.815000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache Thrift: Apache Thrift: Denial of Service via uncontrolled recursion"
    },
    {
      "cve": "CVE-2026-41607",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-04-28T10:01:33.022623+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463412"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This out-of-bounds read vulnerability can lead to the disclosure of sensitive information or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41607"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463412",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463412"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41607",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41607"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41607",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41607"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/28/2",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/28/2"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",
          "url": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"
        }
      ],
      "release_date": "2026-04-28T09:21:48.502000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability"
    },
    {
      "cve": "CVE-2026-41636",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-04-28T10:01:03.992199+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463404"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "apache.com/apache/thrift: Apache Thrift: Node.js skip() recursion",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41636"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463404",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463404"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41636",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41636"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41636",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41636"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/28/1",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/28/1"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",
          "url": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"
        }
      ],
      "release_date": "2026-04-28T09:22:14.639000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "apache.com/apache/thrift: Apache Thrift: Node.js skip() recursion"
    },
    {
      "cve": "CVE-2026-43869",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-05-05T08:00:56.417384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466660"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This vulnerability involves improper validation of a certificate with a host mismatch, which could allow a remote attacker to bypass security checks. By presenting a specially crafted certificate, an attacker may impersonate a legitimate server or client. This could lead to a security bypass, potentially enabling unauthorized access or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache Thrift: Apache Thrift: Security bypass due to improper certificate validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
          "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43869"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466660",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466660"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43869"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/3hsgl1b69wzq3ry39scqbv2dhyl3j52r",
          "url": "https://lists.apache.org/thread/3hsgl1b69wzq3ry39scqbv2dhyl3j52r"
        }
      ],
      "release_date": "2026-05-05T07:25:48.611000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-02T07:42:09+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22423"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:031c9b259f062e07131ae61ad1b354b9362e768fe14bdd1794754e83424f4a20_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:03b18d051be128024f03df408069e5ad2346a2799115a4e13ad7cb394daabe3b_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6fb8506afd2e5f295305dc044e86a3059c1c91052715079388f2ea54a746fb38_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:823597446afec693451e47ebf73fd61d625e6fc327970340d4226b26a71f4707_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1128dffb3133bd5dc86dd3e4d74d807aa3567acf7d9eaf8c94cb522efb2c39ec_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61e24ffe7c4bf801e8ca4650befe3e6bc99235f31445d76d790bab3026ead0ff_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:830a5fffea2982f059927ae3eb9dbe474a4d830175395e1dd32800d08304bc22_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:9db7d9dc19cb6cf1392ea70441d1eb98535f9cfeb478230156ab11f556657b02_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7a1cd2f61dfac63ccec20638eed4ad39b8a3a0d5d78bd68345885af030a1af0b_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7b3abb4db8da02cb6c51b78fa7b8ee19cf0f9640902a5925a7bc2c41d6d25d69_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9ba27f8af737cbe4eb46bf62cdb56e4582ed15640046cf741a062a9702c83a32_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e8d3ee3bc0d99e38df6c617793c517be7261cce2855926a53ab10b42e989bdfd_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:a1d22f270c8e8b6fdb8324bf13b116382c0364058f28ba043128b93772ff33d3_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:0d265ad57e771cf3403b59e030e8e47e4c439c0d300721944ba8ca89ed8d0817_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2e19aabfe25fff53230af0e6236eb19ca44004f47e1ebfe9add5acf9ba3ba525_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9438798cc9dfaf0d93675dd5a6cf1162ff8025f49ab162374e74dffa67f4c1ee_amd64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d5ebd2285f925a5d6efb9bf712ee41aa45dc4cce7ff50a0aca83da5155d4aa8c_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:2b952d5fb1960f40a3f05b351f958829b3a61a31fce495a3af751a063929889d_arm64",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:324b21e3ef94225610d57090e1e05617ae46f4fc536bdcec5d3975c5fc44bb6e_s390x",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dced1f854c7f823c247d35ac265da3994d5dda70fa4829ec91fa49295966c84f_ppc64le",
            "Multicluster Global Hub 1.3.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:debed0fd65dfd3106368fbdad8a3730888c73ffca97a009054a0f2a64bd6ef8c_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache Thrift: Apache Thrift: Security bypass due to improper certificate validation"
    }
  ]
}