{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.9.25 is now available with bug fixes.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.9.25",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:50931",
        "url": "https://access.redhat.com/errata/RHSA-2026:50931"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
        "url": "https://access.redhat.com/security/cve/CVE-2026-13149"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-15927",
        "url": "https://access.redhat.com/security/cve/CVE-2026-15927"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39822",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39822"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42504"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54058",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54058"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54060",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54060"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55379",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55379"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55380",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55380"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-57231",
        "url": "https://access.redhat.com/security/cve/CVE-2026-57231"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59197",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59197"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59199",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59199"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59200",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59200"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59204",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59204"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59205",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59205"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59869"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59885",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59885"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59886",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59886"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50931.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Quay 3.9.25",
    "tracking": {
      "current_release_date": "2026-08-06T07:17:46+00:00",
      "generator": {
        "date": "2026-08-06T07:17:46+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.12"
        }
      },
      "id": "RHSA-2026:50931",
      "initial_release_date": "2026-08-05T22:01:10+00:00",
      "revision_history": [
        {
          "date": "2026-08-05T22:01:10+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-05T22:01:19+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-06T07:17:46+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Quay 3.9",
                "product": {
                  "name": "Red Hat Quay 3.9",
                  "product_id": "Red Hat Quay 3.9",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3.9::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1785564264"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1785563600"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Aa5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1785564443"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Af4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1785563571"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Aacb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1785779712"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3A162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1785563573"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3A84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1785563558"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256%3Aee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1785954125"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3A05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1785563557"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3Ad6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1785950004"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1785563600"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Aab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1785563571"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3Ae6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1785563573"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3A91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1785563558"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3A9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1785563557"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3A427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1785950004"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1785563600"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Aa7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1785563571"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3Afb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1785563573"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3A1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1785563558"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3A19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1785563557"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3Af6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1785950004"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64 as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x as a component of Red Hat Quay 3.9",
          "product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.9"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-13149",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-06-30T10:00:59.843854+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2494813"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "RHBZ#2494813",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
          "url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
        },
        {
          "category": "external",
          "summary": "https://www.npmjs.com/package/brace-expansion",
          "url": "https://www.npmjs.com/package/brace-expansion"
        }
      ],
      "release_date": "2026-06-30T08:30:34.502000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        },
        {
          "category": "workaround",
          "details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Shaon Hossain"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        },
        {
          "names": [
            "Martin Brodeur"
          ]
        }
      ],
      "cve": "CVE-2026-15927",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-02-13T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2501256"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Red Hat Quay\u0027s repository-level mirror configuration\nfeature. The POST and PUT handlers in endpoints/api/mirror.py accept an\nexternal_reference parameter without SSRF validation, unlike the\norganization-level mirror handlers which apply validate_external_registry_url().\nA repository administrator can supply a crafted hostname that causes the Quay\nmirror worker to make requests via Skopeo to internal network services, cloud\nmetadata endpoints, or other resources not intended to be reachable from the\nQuay application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "quay: mirror-registry: SSRF: repo-level mirror accepts external_reference without URL validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in Red Hat Quay\u0027s repository-level mirror configuration allows an authenticated repository administrator to conduct Server-Side Request Forgery (SSRF). By providing a specially crafted hostname, an attacker can force the Quay mirror worker to connect to internal network services or cloud metadata endpoints, potentially exposing sensitive internal resources. This risk is limited to actions performed by an authenticated administrator.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-15927"
        },
        {
          "category": "external",
          "summary": "RHBZ#2501256",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501256"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-15927",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-15927"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15927",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15927"
        }
      ],
      "release_date": "2026-07-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        },
        {
          "category": "workaround",
          "details": "Restrict network egress from Quay mirror worker pods/containers using network\npolicies or firewall rules to block access to internal network ranges\n(10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) and cloud metadata endpoints\n(169.254.169.254, metadata.google.internal). Limit repository creation and\nadmin privileges to trusted users via Quay\u0027s RBAC configuration. If\nrepository-level mirroring is not required, disable the feature or restrict\naccess to the mirror API endpoints through a reverse proxy.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "quay: mirror-registry: SSRF: repo-level mirror accepts external_reference without URL validation"
    },
    {
      "cve": "CVE-2026-39822",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2026-07-08T17:01:53.592869+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498152"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: Go os.Root: Symlink following vulnerability allows directory traversal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in Go\u0027s os.Root implementation. On Unix systems, `os.Root.Open()` improperly follows symlinks to locations outside the root directory when the path ends with a trailing slash (e.g., root.Open(\"symlink/\")). This is because `openat()` with `O_NOFOLLOW` does not prevent symlink resolution when the path has a trailing /. An attacker able to create symlinks within an os.Root directory could use this to read or write files outside the intended root. The os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected. This issue is fixed in Go 1.25.12 and Go 1.26.5.\n\nThe following symbols are affected:\n* `OpenInRoot`: Opens a file or directory within an `os.Root`.\n* `Root.Create`: Creates a file inside an `os.Root`.\n* `Root.Open`: Opens a path relative to an `os.Root`.\n* `Root.OpenFile`: Opens a file with specified flags and permissions inside an `os.Root`.\n* `Root.OpenRoot`: Opens a sub-root directory from an `os.Root`.\n* `Root.ReadFile`: Reads a file inside an `os.Root`.\n* `Root.WriteFile`: Writes a file inside an `os.Root`.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39822"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498152",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498152"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39822",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39822"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/797880",
          "url": "https://go.dev/cl/797880"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79005",
          "url": "https://go.dev/issue/79005"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc",
          "url": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4970",
          "url": "https://pkg.go.dev/vuln/GO-2026-4970"
        }
      ],
      "release_date": "2026-07-08T15:46:27.199000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        },
        {
          "category": "workaround",
          "details": "There is no mitigation for this issue other than updating the Go toolchain to Go 1.25.12 or Go 1.26.5. Programs compiled with Go \u003e= 1.24 that do not use the os.Root API are not affected by this vulnerability.\nThe os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected.\nThis issue is fixed in Go 1.25.12 and Go 1.26.5.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang: Go os.Root: Symlink following vulnerability allows directory traversal"
    },
    {
      "cve": "CVE-2026-42504",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-06-02T23:01:00.320527+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484204"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484204",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/774481",
          "url": "https://go.dev/cl/774481"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79217",
          "url": "https://go.dev/issue/79217"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5038",
          "url": "https://pkg.go.dev/vuln/GO-2026-5038"
        }
      ],
      "release_date": "2026-06-02T22:01:37.219000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
    },
    {
      "cve": "CVE-2026-54058",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-07-14T17:02:34.864708+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500057"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow prior to 12.3.0. When an uncompressed McIdas AREA image is loaded from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width. Pixel access such as Image.tobytes(), getpixel, convert, or save can then read beyond the mapped region, disclosing adjacent process memory or causing a fault.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Pillow is vulnerable to an out-of-bounds read when processing a crafted uncompressed McIdas AREA image via the mmap raw codec. A remote attacker who can supply such an image to a service that loads it without user interaction may disclose adjacent process memory or trigger a denial of service. Fixed in Pillow 12.3.0.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54058"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500057",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500057"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54058",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54058"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54058",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54058"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",
          "url": "https://github.com/python-pillow/Pillow/commit/6a8de891fb00968e5ea79bfa84368ed90b3cfc1d"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9719",
          "url": "https://github.com/python-pillow/Pillow/pull/9719"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-62p4-gmf7-7g93",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-62p4-gmf7-7g93"
        }
      ],
      "release_date": "2026-07-14T16:27:38.050000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image"
    },
    {
      "cve": "CVE-2026-54060",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-07-06T20:02:29.509113+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2497466"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library\u0027s font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory, leading to a denial of service (DoS) for the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in Pillow prior to version 12.3.0. The FontFile.compile() method in PIL/FontFile.py assembles per-glyph images into a combined bitmap using Image.new() without calling Image._decompression_bomb_check(). This allows a specially crafted font file to trigger excessive memory allocation during conversion or saving, leading to denial of service via resource exhaustion.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54060"
        },
        {
          "category": "external",
          "summary": "RHBZ#2497466",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497466"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54060",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54060"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54060",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54060"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
          "url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",
          "url": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2"
        }
      ],
      "release_date": "2026-07-06T18:49:23.788000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files"
    },
    {
      "cve": "CVE-2026-55379",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-06T20:01:29.922515+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2497452"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted BDF font file. The library\u0027s image processing function fails to properly validate dimensions from the font file, bypassing a critical security check designed to prevent excessive memory usage. This oversight can lead to the system consuming an unreasonable amount of memory, making it unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-pillow: Pillow: Denial of Service via crafted BDF font file",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Pillow Python imaging library. The BDF font file parser passes attacker-controlled dimensions to Image.new() without decompression bomb validation, allowing excessive memory allocation and denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55379"
        },
        {
          "category": "external",
          "summary": "RHBZ#2497452",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497452"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55379",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55379"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55379",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55379"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
          "url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",
          "url": "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc"
        }
      ],
      "release_date": "2026-07-06T18:52:11.633000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        },
        {
          "category": "workaround",
          "details": "Do not load BDF font files from untrusted sources. Applications that only process standard image formats (PNG, JPEG, etc.) and do not use BdfFontFile or ImageFont.load() with BDF files are not affected.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python-pillow: Pillow: Denial of Service via crafted BDF font file"
    },
    {
      "cve": "CVE-2026-55380",
      "cwe": {
        "id": "CWE-1285",
        "name": "Improper Validation of Specified Index, Position, or Offset in Input"
      },
      "discovery_date": "2026-07-06T20:01:42.245051+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2497455"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile._open() function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a Denial of Service (DoS) due to C-heap exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-pillow: Pillow: Denial of Service via crafted GD 2.x image file",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A denial-of-service vulnerability was found in Pillow\u0027s GdImageFile plugin. The GdImageFile._open() function reads image dimensions from GD 2.x file headers and stores them without performing a decompression bomb check. A crafted .gd file of approximately 1 KB can trigger an unchecked 4.3 GB C-heap allocation, potentially crashing the process or exhausting memory on systems with insufficient resources. This issue is fixed in Pillow 12.3.0.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55380"
        },
        {
          "category": "external",
          "summary": "RHBZ#2497455",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497455"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55380",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55380"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55380",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55380"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst",
          "url": "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",
          "url": "https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm"
        }
      ],
      "release_date": "2026-07-06T18:50:14.789000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        },
        {
          "category": "workaround",
          "details": "Avoid processing untrusted GD 2.x image files with PIL.GdImageFile.open(). Use Image.open() instead, which includes decompression bomb protections for supported formats. If GdImageFile must be used, validate the image dimensions before calling load(). Restricting accepted image formats at the application boundary to only those explicitly needed can reduce exposure.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python-pillow: Pillow: Denial of Service via crafted GD 2.x image file"
    },
    {
      "cve": "CVE-2026-57231",
      "cwe": {
        "id": "CWE-914",
        "name": "Improper Control of Dynamically-Identified Variables"
      },
      "discovery_date": "2026-06-26T17:01:34.294165+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2493620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Podman, a tool for managing OCI containers and pods. A malicious container image can be crafted with an environment variable that has a key but no value, or an asterisk (*), to trick Podman. This vulnerability causes Podman to pass host environment variables into the container. Consequently, a malicious image could exfiltrate all Podman environment variables set in the session from which the container is launched, leading to information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "podman: Podman: Information disclosure via malicious container image environment variables",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-57231"
        },
        {
          "category": "external",
          "summary": "RHBZ#2493620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-57231",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-57231"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57231",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57231"
        },
        {
          "category": "external",
          "summary": "https://github.com/podman-container-tools/podman/commit/6c431b73dbf8e4b20b778644d7a80caebdb75050",
          "url": "https://github.com/podman-container-tools/podman/commit/6c431b73dbf8e4b20b778644d7a80caebdb75050"
        },
        {
          "category": "external",
          "summary": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-4hq8-gpf5-8p68",
          "url": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-4hq8-gpf5-8p68"
        }
      ],
      "release_date": "2026-06-26T16:29:02.092000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "podman: Podman: Information disclosure via malicious container image environment variables"
    },
    {
      "cve": "CVE-2026-59197",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-07-14T17:01:29.487456+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500043"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow prior to 12.3.0. The public RankFilter API can trigger a native heap out-of-bounds write when given a very large odd filter size. ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation, and ImagingExpand() computes output dimensions with unchecked signed integer arithmetic. This can lead to denial of service and limited integrity impact via heap corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Native heap out-of-bounds write",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Pillow\u0027s RankFilter API is vulnerable to a native heap out-of-bounds write when a caller supplies a very large odd filter size. Expansion runs before size validation and ImagingExpand uses unchecked signed integer arithmetic for output dimensions. A remote attacker who can drive RankFilter with attacker-controlled sizes may crash the process or corrupt heap memory. Fixed in Pillow 12.3.0.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59197"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500043",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500043"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59197",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59197"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59197",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59197"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/cce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",
          "url": "https://github.com/python-pillow/Pillow/commit/cce3bdb867c77a3420261ed1bfdb6b0787ec8fc1"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9695",
          "url": "https://github.com/python-pillow/Pillow/pull/9695"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr"
        }
      ],
      "release_date": "2026-07-14T16:25:23.520000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Native heap out-of-bounds write"
    },
    {
      "cve": "CVE-2026-59199",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-07-14T17:02:51.371888+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500061"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the library\u0027s image processing functions, specifically when handling image coordinates near certain limits. This flaw, a native heap out-of-bounds write, could lead to a denial of service (DoS), making the affected system or application unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Denial of Service via out-of-bounds write in image processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact is limited to denial of service. While the underlying issue is a heap out-of-bounds write, it does not provide a controlled write primitive exploitable for code execution in affected Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59199"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500061",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500061"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59199",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59199"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59199",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59199"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/ceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",
          "url": "https://github.com/python-pillow/Pillow/commit/ceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9703",
          "url": "https://github.com/python-pillow/Pillow/pull/9703"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-6r8x-57c9-28j4",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-6r8x-57c9-28j4"
        }
      ],
      "release_date": "2026-07-14T15:42:15.071000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Denial of Service via out-of-bounds write in image processing"
    },
    {
      "cve": "CVE-2026-59200",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-07-14T17:02:45.929986+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500060"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the PdfParser.PdfStream.decode() function when processing a crafted FlateDecode PDF stream. By providing a specially designed PDF file, the attacker could cause the application to exhaust available memory, leading to a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Denial of service via crafted PDF stream",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact is limited to denial of service via memory exhaustion. A small crafted PDF input can force unbounded decompression, but this does not lead to code execution or information disclosure.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59200"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500060",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500060"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59200",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59200"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59200",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59200"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/f7a31ea75e460e108c37126da1f47812f21f6b09",
          "url": "https://github.com/python-pillow/Pillow/commit/f7a31ea75e460e108c37126da1f47812f21f6b09"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9718",
          "url": "https://github.com/python-pillow/Pillow/pull/9718"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565"
        }
      ],
      "release_date": "2026-07-14T16:09:05.091000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Denial of service via crafted PDF stream"
    },
    {
      "cve": "CVE-2026-59204",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-07-14T16:02:11.802781+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500022"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted JPEG2000 image file. Due to incorrect calculation of memory requirements for image tiles, processing this file can lead to excessive memory consumption, resulting in a denial of service (DoS) through out-of-memory failures.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Denial of Service via crafted JPEG2000 image",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact is limited to denial of service via excessive memory allocation. A crafted JPEG2000 file can trigger out-of-memory failures, but this does not lead to code execution or information disclosure.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59204"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500022",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500022"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59204",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59204"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59204",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59204"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca",
          "url": "https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9704",
          "url": "https://github.com/python-pillow/Pillow/pull/9704"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j"
        }
      ],
      "release_date": "2026-07-14T15:38:29.545000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        },
        {
          "category": "workaround",
          "details": "If the application does not need JPEG2000 support, block .jp2, .j2k, .jpf, and .jpx uploads at the input layer.\n\nFor services that do process JPEG2000, set memory limits on the process or container (LimitAS= in systemd, or memory limits in Kubernetes/Podman) so a crafted image can only crash the worker, not the whole host. Add automatic restarts (Restart=always in systemd, or container restart policies) so the service recovers from OOM kills without someone having to intervene.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Denial of Service via crafted JPEG2000 image"
    },
    {
      "cve": "CVE-2026-59205",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "discovery_date": "2026-07-14T17:02:11.367224+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500052"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows an attacker to trigger controlled native heap corruption by supplying an output image whose mode does not match the transform\u0027s declared output mode when using the ImageCms.ImageCmsTransform.apply API. This can lead to a denial of service (DoS) condition, making the affected system or application unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact is limited to denial of service. While the underlying issue is heap corruption via mode mismatch, it does not provide a controlled write primitive exploitable for code execution in affected Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59205"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500052",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500052"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59205",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59205"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59205",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59205"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",
          "url": "https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/pull/9715",
          "url": "https://github.com/python-pillow/Pillow/pull/9715"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0",
          "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6",
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6"
        }
      ],
      "release_date": "2026-07-14T15:48:39.962000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        },
        {
          "category": "workaround",
          "details": "Most applications using Pillow\u0027s color management via profileToProfile() or applyTransform() are not exposed. Only code that calls ImageCmsTransform.apply() directly with a user-controlled output image whose mode does not match the transform can trigger the heap corruption. Audit your code for direct apply() calls to confirm.\n\nRHEL builds ship with ASLR, full RELRO/PIE, and FORTIFY_SOURCE by default, making escalation from crash to code execution much harder. For DoS containment, configure automatic service restart (Restart=always in systemd, or container restart policies) so the process recovers without manual intervention.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API"
    },
    {
      "cve": "CVE-2026-59869",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-07-08T16:01:38.408322+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498122"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498122",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
          "url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
          "url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
        }
      ],
      "release_date": "2026-07-08T15:15:54.675000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        },
        {
          "category": "workaround",
          "details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
    },
    {
      "cve": "CVE-2026-59885",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-07-14T18:17:12.157807+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500380"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One (ASN.1). The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload containing an OID with many arcs, leading to excessive CPU consumption and a denial of service (DoS) in applications that decode untrusted ASN.1 data. The corresponding encoders also exhibit this quadratic behavior when re-encoding attacker-supplied values.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in pyasn1. The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A small crafted payload containing an OID with many arcs consumes excessive CPU per decode() call, allowing denial of service in applications that decode untrusted ASN.1 data (certificates, LDAP, SNMP, Kerberos). The corresponding encoders exhibit the same behavior when re-encoding attacker-supplied values. The arc-size limit introduced for CVE-2026-23490 does not mitigate this issue. This issue is fixed in pyasn1 version 0.6.4.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59885"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500380",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500380"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59885",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59885"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59885",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59885"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9",
          "url": "https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
          "url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj",
          "url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj"
        }
      ],
      "release_date": "2026-07-14T16:40:00.515000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        },
        {
          "category": "workaround",
          "details": "Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) \u2014 an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER"
    },
    {
      "cve": "CVE-2026-59886",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-14T17:01:19.689422+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500041"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption, leading to a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in pyasn1, rated as Important, could lead to a denial of service in Red Hat products that process untrusted ASN.1 data. A remote attacker could send a specially crafted BER, CER, or DER encoded REAL value with a large exponent, causing applications to consume excessive resources during decoding operations such as printing, logging, or arithmetic, thereby rendering the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
          "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59886"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500041",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500041"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59886",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59886"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59886",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59886"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886",
          "url": "https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4",
          "url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r",
          "url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r"
        }
      ],
      "release_date": "2026-07-14T16:38:29.691000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T22:01:10+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50931"
        },
        {
          "category": "workaround",
          "details": "When processing untrusted ASN.1 data with pyasn1, avoid calling prettyPrint(), str(), float(), int(), or performing comparisons or arithmetic on decoded Real (ASN.1 REAL type) objects. Instead, inspect the raw (mantissa, base, exponent) tuple directly. Where logging decoded ASN.1 structures is necessary, filter out or sanitize Real-typed values before conversion.",
          "product_ids": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1745fe5e9d61d508defcab20917b10f07a93f59f585d2db3b4e0e90f5a575810_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:84519688f09c3b1d1bfa8047b43ee9d66beccf2388a1962c4143fbc1b9ebb8ab_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:91dbd3703bed9f6b9cd5af2c4fd4e2c909d3894d5859bb38cd0aff779712fd1f_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:a5b5afb1630f563b4e3eff6ac3c6efb8ab011d75f49ccab7cee7391cd4d83532_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a7bd337dd766137f2e3a3f99ff22184e82e486f674ff46efa10a7429dbeb66bb_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ab69968f754d9364a897b3f730961a68de05df087469c1ba515401e5d09a416d_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4f8f737998c04b6302aeb28db5aebdfda8aea4beb08a546ba0e65c2bf86bddc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:acb7bb6e62d1d1236333c8b785616587d1f3674c5458af0f429086756fc44b03_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:162390f2b74fd3f3a079e5c0faa0996b8933f60fa6d1522bba786c743f1eb2d8_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:e6924420001257e731f371bcd9aff7b8341a9d6c6d38ff0ed67668bc3b684fe0_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fb7dd607364f3ce80ab5b788c4728dbabee96087479eb717df3909b81575b144_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9aca4565fe6117d9852388593f0d5800d019266fb67c065a7fe1e88291650ae2_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:023666d9184b8a3ae449f8b2260ef331e7403f7c70682c394946d0d830530979_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5915e4c0e0fb26d7e251b73e80fcb6e706d6f829db44132e002a08b420e3b041_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7fb600500c4c41591889027932895b6b570a8f0ded072ffe44ce35fc18af6a38_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:ee8284581f4f451535ff4bb4c1c430fed31cd92df37a8cb96410f1cf62c2a4cc_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:05be0dc429ac55dd27dba6489c32fd43a53eb62ec062528b066ce49b3d2d056d_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:19949390f105f181b89b01bc3bdb5c9c94e576337e287dd55d49051cee861a51_s390x",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:9723f8105532482e1a42da8d97bf5a9984680b019d5e1bd86580bacdd6c3453c_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:427604f87ce3221aee9c8c115a7b80a15aa9b3f6baaa139218b5d410a4fb45cb_ppc64le",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:d6918deb61a5917a667cc8b58da97eef5268e967e44c75c31950ff3f1840a187_amd64",
            "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values"
    }
  ]
}