{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Submariner v0.20 General Availability release images, which provide enhancements, security fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.\nRed Hat Advanced Cluster Management for Kubernetes v2.13",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Submariner is a Kubernetes operator that enables cross-cluster connectivity for services and pods, implementing KEP-1645 (Multi-Cluster Services API). After deploying the Submariner operator, it can enable direct networking between pods and services across different Kubernetes clusters.\n\nFor more information about Submariner, see the Submariner open source community website at: https://submariner.io/.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:36873",
        "url": "https://access.redhat.com/errata/RHSA-2026:36873"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-47950",
        "url": "https://access.redhat.com/security/cve/CVE-2025-47950"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-59530",
        "url": "https://access.redhat.com/security/cve/CVE-2025-59530"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
        "url": "https://access.redhat.com/security/cve/CVE-2025-61726"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
        "url": "https://access.redhat.com/security/cve/CVE-2025-61729"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
        "url": "https://access.redhat.com/security/cve/CVE-2025-68121"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-68151",
        "url": "https://access.redhat.com/security/cve/CVE-2025-68151"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-26017",
        "url": "https://access.redhat.com/security/cve/CVE-2026-26017"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-26018",
        "url": "https://access.redhat.com/security/cve/CVE-2026-26018"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44740"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53488"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53492"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36873.json"
      }
    ],
    "title": "Red Hat Security Advisory: Submariner v0.20 security fixes and container updates",
    "tracking": {
      "current_release_date": "2026-07-09T15:56:06+00:00",
      "generator": {
        "date": "2026-07-09T15:56:06+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.2"
        }
      },
      "id": "RHSA-2026:36873",
      "initial_release_date": "2026-07-08T20:50:51+00:00",
      "revision_history": [
        {
          "date": "2026-07-08T20:50:51+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-08T20:50:58+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-09T15:56:06+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                "product": {
                  "name": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                  "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:acm:2.13::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Advanced Cluster Management for Kubernetes"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-agent-rhel9@sha256%3Af856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-agent-rhel9\u0026tag=1782924920"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-coredns-rhel9@sha256%3A4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-coredns-rhel9\u0026tag=1782924937"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
                  "product_id": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/nettest-rhel9@sha256%3Ae17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/nettest-rhel9\u0026tag=1782926302"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
                  "product_id": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/subctl-rhel9@sha256%3A438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/subctl-rhel9\u0026tag=1782945263"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-operator-bundle@sha256%3Adddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-operator-bundle\u0026tag=1783001304"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-gateway-rhel9@sha256%3A3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-gateway-rhel9\u0026tag=1782925247"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-globalnet-rhel9@sha256%3A4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-globalnet-rhel9\u0026tag=1782925266"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-rhel9-operator@sha256%3Abda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-rhel9-operator\u0026tag=1782933193"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-route-agent-rhel9@sha256%3A6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-route-agent-rhel9\u0026tag=1782925328"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-agent-rhel9@sha256%3Ab6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-agent-rhel9\u0026tag=1782924920"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-coredns-rhel9@sha256%3A2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-coredns-rhel9\u0026tag=1782924937"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/nettest-rhel9@sha256%3A74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/nettest-rhel9\u0026tag=1782926302"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/subctl-rhel9@sha256%3Ae0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/subctl-rhel9\u0026tag=1782945263"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-gateway-rhel9@sha256%3Ae2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/submariner-gateway-rhel9\u0026tag=1782925247"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-globalnet-rhel9@sha256%3A21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/submariner-globalnet-rhel9\u0026tag=1782925266"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-rhel9-operator@sha256%3A85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/submariner-rhel9-operator\u0026tag=1782933193"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-route-agent-rhel9@sha256%3Afb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/submariner-route-agent-rhel9\u0026tag=1782925328"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-agent-rhel9@sha256%3Ac045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-agent-rhel9\u0026tag=1782924920"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-coredns-rhel9@sha256%3Af10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-coredns-rhel9\u0026tag=1782924937"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
                  "product_id": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/nettest-rhel9@sha256%3Acbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/nettest-rhel9\u0026tag=1782926302"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
                  "product_id": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/subctl-rhel9@sha256%3Ad6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/subctl-rhel9\u0026tag=1782945263"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
                  "product_id": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-gateway-rhel9@sha256%3A9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/submariner-gateway-rhel9\u0026tag=1782925247"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
                  "product_id": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-globalnet-rhel9@sha256%3Acdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/submariner-globalnet-rhel9\u0026tag=1782925266"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
                  "product_id": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-rhel9-operator@sha256%3A62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/submariner-rhel9-operator\u0026tag=1782933193"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
                  "product_id": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-route-agent-rhel9@sha256%3A132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/submariner-route-agent-rhel9\u0026tag=1782925328"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-agent-rhel9@sha256%3A08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-agent-rhel9\u0026tag=1782924920"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-coredns-rhel9@sha256%3A548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-coredns-rhel9\u0026tag=1782924937"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
                  "product_id": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/nettest-rhel9@sha256%3A0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/nettest-rhel9\u0026tag=1782926302"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
                  "product_id": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/subctl-rhel9@sha256%3Aa8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/subctl-rhel9\u0026tag=1782945263"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-gateway-rhel9@sha256%3Acdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/submariner-gateway-rhel9\u0026tag=1782925247"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-globalnet-rhel9@sha256%3A1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/submariner-globalnet-rhel9\u0026tag=1782925266"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-rhel9-operator@sha256%3Acda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/submariner-rhel9-operator\u0026tag=1782933193"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-route-agent-rhel9@sha256%3A816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/submariner-route-agent-rhel9\u0026tag=1782925328"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-47950",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-06-06T18:00:49.860708+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2370860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A memory exhaustion vulnerability was found in CoreDNS when operating with QUIC traffic streams. The CoreDNS server in affected versions would spawn a new goroutine for each incoming QUIC stream without limit. This flaw allows a malicious user to create an unbounded number of QUIC streams and consume all available resources, leading to an application level denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "coredns: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "On a Red Hat system, a denial of service to the CoreDNS service will not take down the host system, so the availability impact is assessed as Low for Red Hat systems.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-47950"
        },
        {
          "category": "external",
          "summary": "RHBZ#2370860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-47950",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-47950"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47950",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47950"
        },
        {
          "category": "external",
          "summary": "https://datatracker.ietf.org/doc/html/rfc9250",
          "url": "https://datatracker.ietf.org/doc/html/rfc9250"
        },
        {
          "category": "external",
          "summary": "https://github.com/coredns/coredns/commit/efaed02c6a480ec147b1f799aab7cf815b17dfe1",
          "url": "https://github.com/coredns/coredns/commit/efaed02c6a480ec147b1f799aab7cf815b17dfe1"
        },
        {
          "category": "external",
          "summary": "https://github.com/coredns/coredns/security/advisories/GHSA-cvx7-x8pj-x2gw",
          "url": "https://github.com/coredns/coredns/security/advisories/GHSA-cvx7-x8pj-x2gw"
        },
        {
          "category": "external",
          "summary": "https://github.com/quic-go/quic-go",
          "url": "https://github.com/quic-go/quic-go"
        },
        {
          "category": "external",
          "summary": "https://www.usenix.org/conference/usenixsecurity23/presentation/botella",
          "url": "https://www.usenix.org/conference/usenixsecurity23/presentation/botella"
        }
      ],
      "release_date": "2025-06-06T17:32:30.218000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-08T20:50:51+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-17819\n* ACM-21727\n* ACM-21731\n* ACM-24786\n* ACM-25148\n* ACM-25152\n* ACM-25169\n* ACM-29510\n* ACM-29564\n* ACM-29565\n* ACM-29574\n* ACM-29584\n* ACM-29585\n* ACM-29586\n* ACM-29587\n* ACM-29774\n* ACM-29775\n* ACM-29800\n* ACM-30133\n* ACM-30722\n* ACM-30723\n* ACM-30724\n* ACM-30725\n* ACM-30970\n* ACM-36662\n* ACM-37000\n* ACM-37038\n* ACM-7515\n* ACM-8292\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36873"
        },
        {
          "category": "workaround",
          "details": "Users unable to upgrade should manually disable the QUIC protocol support.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "coredns: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification"
    },
    {
      "cve": "CVE-2025-59530",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2025-10-10T17:01:16.758297+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2403125"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A denial of service flaw has been discovered in the quic-go golang library. A misbehaving or malicious server can cause a denial-of-service (DoS) attack on the quic-go client by triggering an assertion failure, leading to a process crash. This requires no authentication and can be exploited during the handshake phase. This was observed in the wild with certain server implementations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/quic-go/quic-go: quic-go Crash Due to Premature HANDSHAKE_DONE Frame",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The availability risk is limited to applications which includethe quic-go library. Host Red Hat systems are not at risk of availability degradation.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-59530"
        },
        {
          "category": "external",
          "summary": "RHBZ#2403125",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2403125"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-59530",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-59530"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-59530",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59530"
        },
        {
          "category": "external",
          "summary": "https://github.com/quic-go/quic-go/blob/v0.55.0/connection.go#L2682-L2685",
          "url": "https://github.com/quic-go/quic-go/blob/v0.55.0/connection.go#L2682-L2685"
        },
        {
          "category": "external",
          "summary": "https://github.com/quic-go/quic-go/pull/5354",
          "url": "https://github.com/quic-go/quic-go/pull/5354"
        },
        {
          "category": "external",
          "summary": "https://github.com/quic-go/quic-go/security/advisories/GHSA-47m2-4cr7-mhcw",
          "url": "https://github.com/quic-go/quic-go/security/advisories/GHSA-47m2-4cr7-mhcw"
        }
      ],
      "release_date": "2025-10-10T16:09:55.227000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-08T20:50:51+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-17819\n* ACM-21727\n* ACM-21731\n* ACM-24786\n* ACM-25148\n* ACM-25152\n* ACM-25169\n* ACM-29510\n* ACM-29564\n* ACM-29565\n* ACM-29574\n* ACM-29584\n* ACM-29585\n* ACM-29586\n* ACM-29587\n* ACM-29774\n* ACM-29775\n* ACM-29800\n* ACM-30133\n* ACM-30722\n* ACM-30723\n* ACM-30724\n* ACM-30725\n* ACM-30970\n* ACM-36662\n* ACM-37000\n* ACM-37038\n* ACM-7515\n* ACM-8292\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36873"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/quic-go/quic-go: quic-go Crash Due to Premature HANDSHAKE_DONE Frame"
    },
    {
      "cve": "CVE-2025-61726",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-01-28T20:01:42.791305+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2434432"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-61726"
        },
        {
          "category": "external",
          "summary": "RHBZ#2434432",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/736712",
          "url": "https://go.dev/cl/736712"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77101",
          "url": "https://go.dev/issue/77101"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
          "url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4341",
          "url": "https://pkg.go.dev/vuln/GO-2026-4341"
        }
      ],
      "release_date": "2026-01-28T19:30:31.215000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-08T20:50:51+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-17819\n* ACM-21727\n* ACM-21731\n* ACM-24786\n* ACM-25148\n* ACM-25152\n* ACM-25169\n* ACM-29510\n* ACM-29564\n* ACM-29565\n* ACM-29574\n* ACM-29584\n* ACM-29585\n* ACM-29586\n* ACM-29587\n* ACM-29774\n* ACM-29775\n* ACM-29800\n* ACM-30133\n* ACM-30722\n* ACM-30723\n* ACM-30724\n* ACM-30725\n* ACM-30970\n* ACM-36662\n* ACM-37000\n* ACM-37038\n* ACM-7515\n* ACM-8292\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36873"
        },
        {
          "category": "workaround",
          "details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
    },
    {
      "cve": "CVE-2025-61729",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2025-12-02T20:01:45.330964+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2418462"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-61729"
        },
        {
          "category": "external",
          "summary": "RHBZ#2418462",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/725920",
          "url": "https://go.dev/cl/725920"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/76445",
          "url": "https://go.dev/issue/76445"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
          "url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-4155",
          "url": "https://pkg.go.dev/vuln/GO-2025-4155"
        }
      ],
      "release_date": "2025-12-02T18:54:10.166000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-08T20:50:51+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-17819\n* ACM-21727\n* ACM-21731\n* ACM-24786\n* ACM-25148\n* ACM-25152\n* ACM-25169\n* ACM-29510\n* ACM-29564\n* ACM-29565\n* ACM-29574\n* ACM-29584\n* ACM-29585\n* ACM-29586\n* ACM-29587\n* ACM-29774\n* ACM-29775\n* ACM-29800\n* ACM-30133\n* ACM-30722\n* ACM-30723\n* ACM-30724\n* ACM-30725\n* ACM-30970\n* ACM-36662\n* ACM-37000\n* ACM-37038\n* ACM-7515\n* ACM-8292\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36873"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
    },
    {
      "cve": "CVE-2025-68121",
      "discovery_date": "2026-02-05T18:01:30.086058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2437111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "RHBZ#2437111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/737700",
          "url": "https://go.dev/cl/737700"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77217",
          "url": "https://go.dev/issue/77217"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
          "url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4337",
          "url": "https://pkg.go.dev/vuln/GO-2026-4337"
        }
      ],
      "release_date": "2026-02-05T17:48:44.141000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-08T20:50:51+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-17819\n* ACM-21727\n* ACM-21731\n* ACM-24786\n* ACM-25148\n* ACM-25152\n* ACM-25169\n* ACM-29510\n* ACM-29564\n* ACM-29565\n* ACM-29574\n* ACM-29584\n* ACM-29585\n* ACM-29586\n* ACM-29587\n* ACM-29774\n* ACM-29775\n* ACM-29800\n* ACM-30133\n* ACM-30722\n* ACM-30723\n* ACM-30724\n* ACM-30725\n* ACM-30970\n* ACM-36662\n* ACM-37000\n* ACM-37038\n* ACM-7515\n* ACM-8292\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36873"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
    },
    {
      "cve": "CVE-2025-68151",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-01-08T16:01:04.891768+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2428009"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple CoreDNS server implementations (gRPC, HTTPS, and HTTP/3) lack critical resource-limiting controls. An unauthenticated remote attacker can exhaust memory and degrade or crash the server by opening many concurrent connections, streams, or sending oversized request bodies. The issue is similar in nature to CVE-2025-47950 (QUIC DoS) but affects additional server types that do not enforce connection limits, stream limits, or message size constraints.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/coredns/coredns/core/dnsserver: CoreDNS DoS via unbounded connections and oversized messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-68151"
        },
        {
          "category": "external",
          "summary": "RHBZ#2428009",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428009"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-68151",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-68151"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68151",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68151"
        },
        {
          "category": "external",
          "summary": "https://github.com/coredns/coredns/commit/0d8cbb1a6bcb6bc9c1a489865278b8725fa20812",
          "url": "https://github.com/coredns/coredns/commit/0d8cbb1a6bcb6bc9c1a489865278b8725fa20812"
        },
        {
          "category": "external",
          "summary": "https://github.com/coredns/coredns/pull/7490",
          "url": "https://github.com/coredns/coredns/pull/7490"
        },
        {
          "category": "external",
          "summary": "https://github.com/coredns/coredns/security/advisories/GHSA-527x-5wrf-22m2",
          "url": "https://github.com/coredns/coredns/security/advisories/GHSA-527x-5wrf-22m2"
        }
      ],
      "release_date": "2026-01-08T15:33:12.711000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-08T20:50:51+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-17819\n* ACM-21727\n* ACM-21731\n* ACM-24786\n* ACM-25148\n* ACM-25152\n* ACM-25169\n* ACM-29510\n* ACM-29564\n* ACM-29565\n* ACM-29574\n* ACM-29584\n* ACM-29585\n* ACM-29586\n* ACM-29587\n* ACM-29774\n* ACM-29775\n* ACM-29800\n* ACM-30133\n* ACM-30722\n* ACM-30723\n* ACM-30724\n* ACM-30725\n* ACM-30970\n* ACM-36662\n* ACM-37000\n* ACM-37038\n* ACM-7515\n* ACM-8292\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36873"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/coredns/coredns/core/dnsserver: CoreDNS DoS via unbounded connections and oversized messages"
    },
    {
      "cve": "CVE-2026-26017",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-03-06T16:01:45.971241+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445244"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in CoreDNS, a DNS server that uses a chain of plugins. This logical vulnerability allows an attacker to bypass DNS access controls. The issue occurs because security plugins, such as \u0027acl\u0027, are evaluated before the \u0027rewrite\u0027 plugin, creating a Time-of-Check Time-of-Use (TOCTOU) flaw. This flaw enables an attacker to circumvent intended access restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/coredns/coredns: CoreDNS: DNS access control bypass due to plugin execution order flaw",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-26017"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445244",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445244"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-26017",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-26017"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26017",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26017"
        },
        {
          "category": "external",
          "summary": "https://github.com/coredns/coredns/releases/tag/v1.14.2",
          "url": "https://github.com/coredns/coredns/releases/tag/v1.14.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/coredns/coredns/security/advisories/GHSA-c9v3-4pv7-87pr",
          "url": "https://github.com/coredns/coredns/security/advisories/GHSA-c9v3-4pv7-87pr"
        }
      ],
      "release_date": "2026-03-06T15:36:15.655000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-08T20:50:51+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-17819\n* ACM-21727\n* ACM-21731\n* ACM-24786\n* ACM-25148\n* ACM-25152\n* ACM-25169\n* ACM-29510\n* ACM-29564\n* ACM-29565\n* ACM-29574\n* ACM-29584\n* ACM-29585\n* ACM-29586\n* ACM-29587\n* ACM-29774\n* ACM-29775\n* ACM-29800\n* ACM-30133\n* ACM-30722\n* ACM-30723\n* ACM-30724\n* ACM-30725\n* ACM-30970\n* ACM-36662\n* ACM-37000\n* ACM-37038\n* ACM-7515\n* ACM-8292\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36873"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/coredns/coredns: CoreDNS: DNS access control bypass due to plugin execution order flaw"
    },
    {
      "cve": "CVE-2026-26018",
      "cwe": {
        "id": "CWE-1241",
        "name": "Use of Predictable Algorithm in Random Number Generator"
      },
      "discovery_date": "2026-03-06T16:01:38.150099+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445242"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in CoreDNS, a DNS server that chains plugins. A remote attacker can exploit this flaw by sending specially crafted DNS queries. This vulnerability exists in CoreDNS\u0027s loop detection plugin due to the use of a predictable pseudo-random number generator (PRNG) for generating a secret query name. Successful exploitation can lead to a denial of service (DoS) by crashing the DNS server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/coredns/coredns: CoreDNS: Denial of Service vulnerability due to predictable pseudo-random number generation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-26018"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445242",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445242"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-26018",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-26018"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26018",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26018"
        },
        {
          "category": "external",
          "summary": "https://github.com/coredns/coredns/releases/tag/v1.14.2",
          "url": "https://github.com/coredns/coredns/releases/tag/v1.14.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/coredns/coredns/security/advisories/GHSA-h75p-j8xm-m278",
          "url": "https://github.com/coredns/coredns/security/advisories/GHSA-h75p-j8xm-m278"
        }
      ],
      "release_date": "2026-03-06T15:35:50.801000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-08T20:50:51+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-17819\n* ACM-21727\n* ACM-21731\n* ACM-24786\n* ACM-25148\n* ACM-25152\n* ACM-25169\n* ACM-29510\n* ACM-29564\n* ACM-29565\n* ACM-29574\n* ACM-29584\n* ACM-29585\n* ACM-29586\n* ACM-29587\n* ACM-29774\n* ACM-29775\n* ACM-29800\n* ACM-30133\n* ACM-30722\n* ACM-30723\n* ACM-30724\n* ACM-30725\n* ACM-30970\n* ACM-36662\n* ACM-37000\n* ACM-37038\n* ACM-7515\n* ACM-8292\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36873"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/coredns/coredns: CoreDNS: Denial of Service vulnerability due to predictable pseudo-random number generation"
    },
    {
      "cve": "CVE-2026-44740",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-01T17:01:53.685793+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483894"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483894",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
          "url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
          "url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
          "url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
        }
      ],
      "release_date": "2026-06-01T16:04:50.358000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-08T20:50:51+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-17819\n* ACM-21727\n* ACM-21731\n* ACM-24786\n* ACM-25148\n* ACM-25152\n* ACM-25169\n* ACM-29510\n* ACM-29564\n* ACM-29565\n* ACM-29574\n* ACM-29584\n* ACM-29585\n* ACM-29586\n* ACM-29587\n* ACM-29774\n* ACM-29775\n* ACM-29800\n* ACM-30133\n* ACM-30722\n* ACM-30723\n* ACM-30724\n* ACM-30725\n* ACM-30970\n* ACM-36662\n* ACM-37000\n* ACM-37038\n* ACM-7515\n* ACM-8292\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36873"
        },
        {
          "category": "workaround",
          "details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
    },
    {
      "cve": "CVE-2026-53488",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-07-01T02:01:09.589815+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2495815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53488"
        },
        {
          "category": "external",
          "summary": "RHBZ#2495815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
        }
      ],
      "release_date": "2026-07-01T00:11:20.610000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-08T20:50:51+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-17819\n* ACM-21727\n* ACM-21731\n* ACM-24786\n* ACM-25148\n* ACM-25152\n* ACM-25169\n* ACM-29510\n* ACM-29564\n* ACM-29565\n* ACM-29574\n* ACM-29584\n* ACM-29585\n* ACM-29586\n* ACM-29587\n* ACM-29774\n* ACM-29775\n* ACM-29800\n* ACM-30133\n* ACM-30722\n* ACM-30723\n* ACM-30724\n* ACM-30725\n* ACM-30970\n* ACM-36662\n* ACM-37000\n* ACM-37038\n* ACM-7515\n* ACM-8292\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36873"
        },
        {
          "category": "workaround",
          "details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
    },
    {
      "cve": "CVE-2026-53492",
      "cwe": {
        "id": "CWE-807",
        "name": "Reliance on Untrusted Inputs in a Security Decision"
      },
      "discovery_date": "2026-07-01T19:01:34.238078+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2496130"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "RHBZ#2496130",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
        }
      ],
      "release_date": "2026-07-01T17:59:12.552000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-08T20:50:51+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-17819\n* ACM-21727\n* ACM-21731\n* ACM-24786\n* ACM-25148\n* ACM-25152\n* ACM-25169\n* ACM-29510\n* ACM-29564\n* ACM-29565\n* ACM-29574\n* ACM-29584\n* ACM-29585\n* ACM-29586\n* ACM-29587\n* ACM-29774\n* ACM-29775\n* ACM-29800\n* ACM-30133\n* ACM-30722\n* ACM-30723\n* ACM-30724\n* ACM-30725\n* ACM-30970\n* ACM-36662\n* ACM-37000\n* ACM-37038\n* ACM-7515\n* ACM-8292\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36873"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:08c46fced26b98ad3e1a07a3f3c7239521d916bfe116d2e7a44068011319ccd3_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b6aac33c3af11a883a7c45d6dc8392d9ffc8fff09b21f31404b97e48beebbe7b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:c045357b268bc940f2ccd50d17eaeba2a80f332a4b76baff1fcfdec8992eb785_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:f856073e50bb0cc5519d7ec413e4ff92da750fbce141cefbeaf3dd945149ea06_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:2d9c2c52df2251db58f47eb0b982ecf62175d9aa29ba7a6a3d72001034441390_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4fb8d0f81059a89c233aa55d72b5007c42811557a815ce0ec7f3ee042cb6a560_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:548a13d40574a1efd59f327a0d9193ff8e0109b571645ea16721347a89774e0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:f10f17672a539dd7a7f5f40b52d9bed10ea03438141259e7fbe75373c73985f5_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:0bafca38a2e80233c1b859d4bc2d9bde815678460cf71d5aac5804a1524344dc_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:74f9c159bf2af9e6fc2188234ba7146f00519f130e9d7c2d14902e73a0c115bd_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cbbb16e36221a15955a62d54ff631029080ab27f92d8c6b9e4507bf4d32b686f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/nettest-rhel9@sha256:e17325bedd6b7212772ea2888a703b159115cd573320c5313bd649c962674e60_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:438c6d99281497b67dfdf4d2bb5f5c13abf1fce3ea6f50d96ed5f5c88fe5086e_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8b2139b2664316d43fc31479c468b4af7afb0d370a81a794bd71dbb4d97de0f_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d6e2d8f486276918329ca386bd54385d944009a412830d8d3c175ab38f23dcf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/subctl-rhel9@sha256:e0e37798c3c66494c68259d79ead0e18fe7327f27c7babf72386b210595f1877_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:3ddcf732be3481259c42b647cb273b5968ddf2d5ff5c31de4ee8cfbe3182c238_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9abe7999226734514841159e0555e5a13be581b84c7bd9899f7f956dae5fea07_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:cdd5f5b983486e39cdaa76f3fb97266994863b68be8dd1fabdba8592f0f4b581_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:e2da53cce8f1e6fa1a6d235047b709835f08d1186833baae48ce106dd9029e25_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:1605dc6f3baba80be77d26e09d32a3adfc4711fdbf90dca8f821dcae6131cb95_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:21f72fb118a708fcf5e0bb6dc5091954275f0496c0f4fbd67937c2ef6e94a12b_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4e0213961fd6865df9076e5c613370a45f68ba6fef646e0e23492358d00d167c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:cdb56f8231fef80d46bf68132c1e7a40fd2592e3024590cea801ece6d3de6b14_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:dddc574f9c2ed8e7266522761842ea2c88e9cad3e284cf9c3522fd5e834d82ef_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:62857f91e51e167d39fcf932c444d04b6105720299372789fe97941aafa5ff52_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:85cf9cf1f440604ad7346608d6920720acc9e75b2a0c3579439e73d0a7278554_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:bda6bd1cadc353bf93dbb387b0e473840efa4488a11488b9e0f91e22a86cb834_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:cda143023feee01e4cd88a075c93a587ed14f6071611ef2516d89ad33f51ee0d_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:132249054adcac03505c8ba0668c0d625ac17187252b529f547a60c48e5e5ab6_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:6eea9dda872fe39f1f8b6ca114434dab0d98c9da64864ee6281362b992e59f7b_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:816d881aa7a3c8c7257877a6b84239fed4e3b66d582fd463f1b877bde5d6e378_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:fb70c6acd3110cef92807982f8c66403552507d2bc52e212b0ef97ae116a50c7_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
    }
  ]
}