{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.12.16 is now available with bug fixes.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.12.16",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:6720",
        "url": "https://access.redhat.com/errata/RHSA-2026:6720"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25679"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-28498",
        "url": "https://access.redhat.com/security/cve/CVE-2026-28498"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
        "url": "https://access.redhat.com/security/cve/CVE-2026-29063"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
        "url": "https://access.redhat.com/security/cve/CVE-2026-30922"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32597",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32597"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4598",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4598"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4599",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4599"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4600",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4600"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4601",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4601"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4602",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4602"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6720.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Quay 3.12.16",
    "tracking": {
      "current_release_date": "2026-08-18T10:49:54+00:00",
      "generator": {
        "date": "2026-08-18T10:49:54+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:6720",
      "initial_release_date": "2026-04-06T22:57:46+00:00",
      "revision_history": [
        {
          "date": "2026-04-06T22:57:46+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-15T05:55:47+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-18T10:49:54+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Quay 3.12",
                "product": {
                  "name": "Red Hat Quay 3.12",
                  "product_id": "Red Hat Quay 3.12",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3.12::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774886169"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Abddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885564"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Abdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774886107"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885572"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Ab812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775236144"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3A0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885641"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3Aefa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885604"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256%3A3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775257350"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3Ab227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885546"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3A356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775253092"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ae797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885564"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885572"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3A62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885641"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3A158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885604"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3Ab75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885546"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3A82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775253092"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885564"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885572"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3Aba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885641"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3A61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885604"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3A5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885546"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3Acd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1775253092"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885564"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885572"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3A9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885641"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3A766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885604"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3A11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885546"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3Ac8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1775253092"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-4598",
      "cwe": {
        "id": "CWE-1287",
        "name": "Improper Validation of Specified Type of Input"
      },
      "discovery_date": "2026-03-23T06:01:47.891452+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2450210"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jsrsasign. A remote attacker could exploit this vulnerability by providing specially crafted zero or negative inputs to the bnModInverse function within the BigInteger.modInverse implementation. This could lead to an infinite loop, causing a permanent denial of service (DoS) by hanging the process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jsrsasign: jsrsasign: Denial of Service via infinite loop in bnModInverse function with crafted inputs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "IMPORTANT: A denial of service flaw was found in jsrsasign. This vulnerability allows a remote attacker to cause a permanent denial of service by providing specially crafted zero or negative inputs to the bnModInverse function, leading to an infinite loop. This affects Red Hat Migration Toolkit for Virtualization and Red Hat Quay, which utilize the vulnerable jsrsasign component.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4598"
        },
        {
          "category": "external",
          "summary": "RHBZ#2450210",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450210"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4598",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4598"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4598",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4598"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/Kr0emer/a1bf5cd4547cc630d2dcc5e761de8264",
          "url": "https://gist.github.com/Kr0emer/a1bf5cd4547cc630d2dcc5e761de8264"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/commit/ca5b027240287a1e71fe63019fc4400332594323",
          "url": "https://github.com/kjur/jsrsasign/commit/ca5b027240287a1e71fe63019fc4400332594323"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/pull/648",
          "url": "https://github.com/kjur/jsrsasign/pull/648"
        },
        {
          "category": "external",
          "summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370938",
          "url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370938"
        }
      ],
      "release_date": "2026-03-23T05:00:11.571000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jsrsasign: jsrsasign: Denial of Service via infinite loop in bnModInverse function with crafted inputs"
    },
    {
      "cve": "CVE-2026-4599",
      "cwe": {
        "id": "CWE-338",
        "name": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)"
      },
      "discovery_date": "2026-03-23T06:01:34.008562+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2450207"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jsrsasign. An attacker can exploit an incomplete comparison vulnerability in the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions. By manipulating incorrect comparison checks, an attacker can bias the Digital Signature Algorithm (DSA) nonces during signature generation. This allows the attacker to recover the private key, leading to a critical security compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jsrsasign: jsrsasign: Private key recovery via incomplete comparison checks biasing DSA nonces",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4599"
        },
        {
          "category": "external",
          "summary": "RHBZ#2450207",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450207"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4599",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4599"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4599",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4599"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/Kr0emer/081681818b51605c91945126d74b4f20",
          "url": "https://gist.github.com/Kr0emer/081681818b51605c91945126d74b4f20"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/commit/ee4b013478366cb16cea9a4bdfb218b6077f83b1",
          "url": "https://github.com/kjur/jsrsasign/commit/ee4b013478366cb16cea9a4bdfb218b6077f83b1"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/pull/647",
          "url": "https://github.com/kjur/jsrsasign/pull/647"
        },
        {
          "category": "external",
          "summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370939",
          "url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370939"
        }
      ],
      "release_date": "2026-03-23T05:00:12.522000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jsrsasign: jsrsasign: Private key recovery via incomplete comparison checks biasing DSA nonces"
    },
    {
      "cve": "CVE-2026-4600",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-03-23T06:01:39.334925+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2450208"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jsrsasign. An attacker can exploit improper verification of cryptographic signatures by supplying malicious domain parameters during the Digital Signature Algorithm (DSA) validation process. This allows the attacker to forge DSA signatures or X.509 certificates, which would then be accepted as legitimate, potentially leading to unauthorized access or data manipulation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jsrsasign: jsrsasign: Cryptographic signature forgery via malicious DSA domain parameters",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "IMPORTANT. The flaw in jsrsasign allows an attacker to forge Digital Signature Algorithm (DSA) signatures or X.509 certificates by providing malicious domain parameters during validation. This could lead to unauthorized access or data manipulation in affected Red Hat products such as Migration Toolkit for Virtualization and Red Hat Quay, where jsrsasign is utilized for cryptographic signature verification.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4600"
        },
        {
          "category": "external",
          "summary": "RHBZ#2450208",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450208"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4600",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4600"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4600",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4600"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7",
          "url": "https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60",
          "url": "https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/pull/646",
          "url": "https://github.com/kjur/jsrsasign/pull/646"
        },
        {
          "category": "external",
          "summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940",
          "url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940"
        }
      ],
      "release_date": "2026-03-23T05:00:08.475000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jsrsasign: jsrsasign: Cryptographic signature forgery via malicious DSA domain parameters"
    },
    {
      "cve": "CVE-2026-4601",
      "cwe": {
        "id": "CWE-325",
        "name": "Missing Cryptographic Step"
      },
      "discovery_date": "2026-03-23T06:01:44.014846+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2450209"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jsrsasign. An attacker can exploit a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process, specifically within the KJUR.crypto.DSA.signWithMessageHash function. By manipulating the signature generation to force specific values, the library emits an invalid signature without retrying. This vulnerability allows an attacker to recover the private key used for signing.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jsrsasign: jsrsasign: Private Key Recovery via Missing Cryptographic Step in DSA Signing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "IMPORTANT: A flaw in the jsrsasign library allows for private key recovery due to a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process. An attacker can manipulate signature generation within the KJUR.crypto.DSA.signWithMessageHash function to force specific values, enabling the recovery of the private key. This impacts Red Hat products utilizing jsrsasign, such as Migration Toolkit for Virtualization and Red Hat Quay.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4601"
        },
        {
          "category": "external",
          "summary": "RHBZ#2450209",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450209"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4601",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4601"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4601",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4601"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/Kr0emer/93789fe6efe5519db9692d4ad1dad586",
          "url": "https://gist.github.com/Kr0emer/93789fe6efe5519db9692d4ad1dad586"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/commit/0710e392ec35de697ce11e4219c988ba2b5fe0eb",
          "url": "https://github.com/kjur/jsrsasign/commit/0710e392ec35de697ce11e4219c988ba2b5fe0eb"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/pull/645",
          "url": "https://github.com/kjur/jsrsasign/pull/645"
        },
        {
          "category": "external",
          "summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370941",
          "url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370941"
        }
      ],
      "release_date": "2026-03-23T05:00:13.312000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jsrsasign: jsrsasign: Private Key Recovery via Missing Cryptographic Step in DSA Signing"
    },
    {
      "cve": "CVE-2026-4602",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "discovery_date": "2026-03-23T06:01:28.729668+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2450206"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jsrsasign. A remote attacker can exploit an incorrect conversion between numeric types by providing a negative exponent to the `modPow` function. This vulnerability can force the computation of incorrect modular inverses, which ultimately allows an attacker to bypass signature verification.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jsrsasign: jsrsasign: Signature verification bypass via negative exponent handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an IMPORTANT flaw. The `jsrsasign` library, as used in Red Hat products such as Migration Toolkit for Virtualization and Red Hat Quay, is vulnerable to a signature verification bypass. A remote attacker could provide a specially crafted negative exponent to the `modPow` function, leading to incorrect modular inverse computations and allowing them to bypass signature verification.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4602"
        },
        {
          "category": "external",
          "summary": "RHBZ#2450206",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450206"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4602",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4602"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4602",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4602"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/Kr0emer/7ecd2be7d17419e4677315ef3758faf5",
          "url": "https://gist.github.com/Kr0emer/7ecd2be7d17419e4677315ef3758faf5"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/commit/5ea1c32bb2aa894b4bd29849839afe4f98728195",
          "url": "https://github.com/kjur/jsrsasign/commit/5ea1c32bb2aa894b4bd29849839afe4f98728195"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/pull/650",
          "url": "https://github.com/kjur/jsrsasign/pull/650"
        },
        {
          "category": "external",
          "summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371175",
          "url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371175"
        }
      ],
      "release_date": "2026-03-23T05:00:10.567000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jsrsasign: jsrsasign: Signature verification bypass via negative exponent handling"
    },
    {
      "cve": "CVE-2026-25679",
      "cwe": {
        "id": "CWE-1286",
        "name": "Improper Validation of Syntactic Correctness of Input"
      },
      "discovery_date": "2026-03-06T22:02:11.567841+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445356"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445356",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/752180",
          "url": "https://go.dev/cl/752180"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77578",
          "url": "https://go.dev/issue/77578"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
          "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4601",
          "url": "https://pkg.go.dev/vuln/GO-2026-4601"
        }
      ],
      "release_date": "2026-03-06T21:28:14.211000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
    },
    {
      "cve": "CVE-2026-28498",
      "cwe": {
        "id": "CWE-325",
        "name": "Missing Cryptographic Step"
      },
      "discovery_date": "2026-03-16T19:02:00.128339+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448182"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Authlib, a Python library used for building OAuth and OpenID Connect (OIDC) servers. This vulnerability allows a remote attacker to bypass critical integrity checks in OIDC ID Tokens. Specifically, the library\u0027s internal hash verification logic fails open when encountering an unsupported cryptographic algorithm, accepting a forged ID Token as valid. This can lead to an authentication bypass, granting unauthorized access to systems relying on Authlib for OIDC authentication.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "authlib: Authlib: Authentication bypass via forged OpenID Connect ID Tokens",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This IMPORTANT vulnerability in Authlib allows attackers to bypass OIDC ID Token integrity verification. The at_hash and c_hash validation fails open for unknown algorithms, accepting forged tokens as valid. Exploitation requires no authentication or user interaction. Impact is high to confidentiality and integrity. Red Hat products using Authlib for OIDC validation are affected. Fixed in version 1.6.9.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-28498"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448182",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448182"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-28498",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-28498"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28498",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28498"
        },
        {
          "category": "external",
          "summary": "https://github.com/authlib/authlib/commit/b9bb2b25bf8b7e01512d847a95c1749646eaa72b",
          "url": "https://github.com/authlib/authlib/commit/b9bb2b25bf8b7e01512d847a95c1749646eaa72b"
        },
        {
          "category": "external",
          "summary": "https://github.com/authlib/authlib/releases/tag/v1.6.9",
          "url": "https://github.com/authlib/authlib/releases/tag/v1.6.9"
        },
        {
          "category": "external",
          "summary": "https://github.com/authlib/authlib/security/advisories/GHSA-m344-f55w-2m6j",
          "url": "https://github.com/authlib/authlib/security/advisories/GHSA-m344-f55w-2m6j"
        }
      ],
      "release_date": "2026-03-16T18:03:28.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "authlib: Authlib: Authentication bypass via forged OpenID Connect ID Tokens"
    },
    {
      "cve": "CVE-2026-29063",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-03-06T19:00:57.982727+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445291"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-29063"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445291",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
          "url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
        }
      ],
      "release_date": "2026-03-06T18:25:22.438000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
    },
    {
      "cve": "CVE-2026-30922",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-03-18T04:02:45.401296+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448553"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-30922"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448553",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
          "url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
          "url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
        }
      ],
      "release_date": "2026-03-18T02:29:45.857000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
    },
    {
      "cve": "CVE-2026-32597",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-03-12T22:01:29.967713+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2447194"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 \u00a74.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32597"
        },
        {
          "category": "external",
          "summary": "RHBZ#2447194",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32597",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32597"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f",
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f"
        }
      ],
      "release_date": "2026-03-12T21:41:50.427000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)"
    }
  ]
}