RHSA-2026:51057

Vulnerability from csaf_redhat - Published: 2026-08-06 11:09 - Updated: 2026-08-12 05:34
Summary
Red Hat Security Advisory: OpenShift Source To Image 1.6.3
Severity
Important
Notes
Topic: OpenShift Source To Image 1.6.3 Release
Details: Release of OpenShift Source To Image 1.6.3
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-27145

A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Product Identifier Version Remediation
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64 —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2026-33811

A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1341 - Multiple Releases of Same Resource or Handle
Affected products
Product Identifier Version Remediation
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64 —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2026-41567

A flaw was found in Moby, the open-source container framework, and Docker Engine. A malicious container image can exploit this vulnerability to achieve arbitrary code execution with full daemon privileges, including host root access. This occurs when a user uploads a compressed archive to the container, as the daemon incorrectly uses decompression binaries from the container's filesystem. This allows an attacker to gain complete control over the affected system.

7.5 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
CWE-427 - Uncontrolled Search Path Element
Affected products
Product Identifier Version Remediation
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64 —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2026-42306

A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.

7.2 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H
CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products
Product Identifier Version Remediation
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64 —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2026-42504

A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Product Identifier Version Remediation
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64 —
Vendor Fix fix
Workaround
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:51057 self
https://access.redhat.com/security/cve/CVE-2026-27145 external
https://access.redhat.com/security/cve/CVE-2026-33811 external
https://access.redhat.com/security/cve/CVE-2026-41567 external
https://access.redhat.com/security/cve/CVE-2026-42306 external
https://access.redhat.com/security/cve/CVE-2026-42504 external
https://access.redhat.com/security/updates/classi… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-27145 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484207 external
https://www.cve.org/CVERecord?id=CVE-2026-27145 external
https://nvd.nist.gov/vuln/detail/CVE-2026-27145 external
https://go.dev/cl/783621 external
https://go.dev/issue/79694 external
https://groups.google.com/g/golang-announce/c/tKs… external
https://pkg.go.dev/vuln/GO-2026-5037 external
https://access.redhat.com/security/cve/CVE-2026-33811 self
https://bugzilla.redhat.com/show_bug.cgi?id=2467822 external
https://www.cve.org/CVERecord?id=CVE-2026-33811 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33811 external
https://go.dev/cl/767860 external
https://go.dev/issue/78803 external
https://groups.google.com/g/golang-announce/c/qcC… external
https://pkg.go.dev/vuln/GO-2026-4981 external
https://access.redhat.com/security/cve/CVE-2026-41567 self
https://bugzilla.redhat.com/show_bug.cgi?id=2485356 external
https://www.cve.org/CVERecord?id=CVE-2026-41567 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41567 external
https://github.com/moby/moby/security/advisories/… external
https://access.redhat.com/security/cve/CVE-2026-42306 self
https://bugzilla.redhat.com/show_bug.cgi?id=2488484 external
https://www.cve.org/CVERecord?id=CVE-2026-42306 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42306 external
https://github.com/moby/moby/security/advisories/… external
https://access.redhat.com/security/cve/CVE-2026-42504 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484204 external
https://www.cve.org/CVERecord?id=CVE-2026-42504 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42504 external
https://go.dev/cl/774481 external
https://go.dev/issue/79217 external
https://pkg.go.dev/vuln/GO-2026-5038 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "OpenShift Source To Image 1.6.3 Release",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Release of OpenShift Source To Image 1.6.3",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:51057",
        "url": "https://access.redhat.com/errata/RHSA-2026:51057"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33811"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41567",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41567"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42306",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42306"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42504"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51057.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Source To Image 1.6.3",
    "tracking": {
      "current_release_date": "2026-08-12T05:34:36+00:00",
      "generator": {
        "date": "2026-08-12T05:34:36+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.14"
        }
      },
      "id": "RHSA-2026:51057",
      "initial_release_date": "2026-08-06T11:09:37+00:00",
      "revision_history": [
        {
          "date": "2026-08-06T11:09:37+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-08T04:36:23+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-12T05:34:36+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "OpenShift Developer Tools and Services 1.6.2",
                "product": {
                  "name": "OpenShift Developer Tools and Services 1.6.2",
                  "product_id": "OpenShift Developer Tools and Services 1.6.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:source_to_image:1.6::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "OpenShift Developer Tools and Services"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
                "product": {
                  "name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
                  "product_id": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/source-to-image-rhel8@sha256%3A165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346?arch=amd64\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel8\u0026tag=1784727697"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
                "product": {
                  "name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
                  "product_id": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/source-to-image-rhel9@sha256%3A2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e?arch=amd64\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel9\u0026tag=1784728036"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
                "product": {
                  "name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
                  "product_id": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/source-to-image-rhel8@sha256%3A3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d?arch=arm64\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel8\u0026tag=1784727697"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64",
                "product": {
                  "name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64",
                  "product_id": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/source-to-image-rhel9@sha256%3Afc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860?arch=arm64\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel9\u0026tag=1784728036"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
                "product": {
                  "name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
                  "product_id": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/source-to-image-rhel8@sha256%3A1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3?arch=ppc64le\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel8\u0026tag=1784727697"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
                "product": {
                  "name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
                  "product_id": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/source-to-image-rhel9@sha256%3Ada07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573?arch=ppc64le\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel9\u0026tag=1784728036"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
                "product": {
                  "name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
                  "product_id": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/source-to-image-rhel8@sha256%3Af3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0?arch=s390x\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel8\u0026tag=1784727697"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
                "product": {
                  "name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
                  "product_id": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/source-to-image-rhel9@sha256%3Ac2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3?arch=s390x\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel9\u0026tag=1784728036"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64 as a component of OpenShift Developer Tools and Services 1.6.2",
          "product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64"
        },
        "product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
        "relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le as a component of OpenShift Developer Tools and Services 1.6.2",
          "product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le"
        },
        "product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
        "relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64 as a component of OpenShift Developer Tools and Services 1.6.2",
          "product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64"
        },
        "product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
        "relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x as a component of OpenShift Developer Tools and Services 1.6.2",
          "product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x"
        },
        "product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
        "relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64 as a component of OpenShift Developer Tools and Services 1.6.2",
          "product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64"
        },
        "product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
        "relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x as a component of OpenShift Developer Tools and Services 1.6.2",
          "product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x"
        },
        "product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
        "relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le as a component of OpenShift Developer Tools and Services 1.6.2",
          "product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le"
        },
        "product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
        "relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64 as a component of OpenShift Developer Tools and Services 1.6.2",
          "product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
        },
        "product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64",
        "relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-27145",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-02T23:01:08.992540+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484207"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484207",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/783621",
          "url": "https://go.dev/cl/783621"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79694",
          "url": "https://go.dev/issue/79694"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5037",
          "url": "https://pkg.go.dev/vuln/GO-2026-5037"
        }
      ],
      "release_date": "2026-06-02T22:01:36.954000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-06T11:09:37+00:00",
          "details": "It is recommended that existing users of OpenShift Source To Image upgrade to v1.6.3",
          "product_ids": [
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:51057"
        },
        {
          "category": "workaround",
          "details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "product_ids": [
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
    },
    {
      "cve": "CVE-2026-33811",
      "cwe": {
        "id": "CWE-1341",
        "name": "Multiple Releases of Same Resource or Handle"
      },
      "discovery_date": "2026-05-07T20:01:34.913869+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467822"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467822",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/767860",
          "url": "https://go.dev/cl/767860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78803",
          "url": "https://go.dev/issue/78803"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4981",
          "url": "https://pkg.go.dev/vuln/GO-2026-4981"
        }
      ],
      "release_date": "2026-05-07T19:41:19.285000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-06T11:09:37+00:00",
          "details": "It is recommended that existing users of OpenShift Source To Image upgrade to v1.6.3",
          "product_ids": [
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:51057"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
          "product_ids": [
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
    },
    {
      "cve": "CVE-2026-41567",
      "cwe": {
        "id": "CWE-427",
        "name": "Uncontrolled Search Path Element"
      },
      "discovery_date": "2026-06-05T02:00:54.488930+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2485356"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Moby, the open-source container framework, and Docker Engine. A malicious container image can exploit this vulnerability to achieve arbitrary code execution with full daemon privileges, including host root access. This occurs when a user uploads a compressed archive to the container, as the daemon incorrectly uses decompression binaries from the container\u0027s filesystem. This allows an attacker to gain complete control over the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability. A flaw in Moby and Docker Engine allows for arbitrary code execution with host root privileges. This occurs when a user uploads a compressed archive to a container, as the daemon incorrectly uses decompression binaries from the container\u0027s filesystem. This could lead to a complete compromise of the host system if a malicious container image is utilized.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41567"
        },
        {
          "category": "external",
          "summary": "RHBZ#2485356",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485356"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41567",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41567"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41567",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41567"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r",
          "url": "https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r"
        }
      ],
      "release_date": "2026-06-05T00:35:50.563000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-06T11:09:37+00:00",
          "details": "It is recommended that existing users of OpenShift Source To Image upgrade to v1.6.3",
          "product_ids": [
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:51057"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, Red Hat recommends only running containers from trusted images. Additionally, users should avoid piping compressed archives into containers created from untrusted images. For environments utilizing authorization plugins, restricting access to the `PUT /containers/{id}/archive` endpoint can further reduce exposure.",
          "product_ids": [
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload"
    },
    {
      "cve": "CVE-2026-42306",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-06-12T19:01:10.843543+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2488484"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in the Moby container framework where a race condition during `docker cp` mount setup could allow a malicious container to overwrite arbitrary host files. Exploitation requires an attacker to have control over a running container, which could lead to data corruption or denial of service on the host system.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "RHBZ#2488484",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488484"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42306",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh",
          "url": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh"
        }
      ],
      "release_date": "2026-06-12T18:09:22.188000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-06T11:09:37+00:00",
          "details": "It is recommended that existing users of OpenShift Source To Image upgrade to v1.6.3",
          "product_ids": [
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:51057"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup"
    },
    {
      "cve": "CVE-2026-42504",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-06-02T23:01:00.320527+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484204"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
          "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484204",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/774481",
          "url": "https://go.dev/cl/774481"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79217",
          "url": "https://go.dev/issue/79217"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5038",
          "url": "https://pkg.go.dev/vuln/GO-2026-5038"
        }
      ],
      "release_date": "2026-06-02T22:01:37.219000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-06T11:09:37+00:00",
          "details": "It is recommended that existing users of OpenShift Source To Image upgrade to v1.6.3",
          "product_ids": [
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:51057"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
          "product_ids": [
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le",
            "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.