{
  "document" : {
    "aggregate_severity" : {
      "namespace" : "https://access.redhat.com/security/updates/classification/",
      "text" : "Important"
    },
    "category" : "csaf_security_advisory",
    "csaf_version" : "2.0",
    "distribution" : {
      "text" : "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "en",
    "notes" : [ {
      "category" : "summary",
      "text" : "Red Hat Quay 3.17.3 is now available with bug fixes.",
      "title" : "Topic"
    }, {
      "category" : "general",
      "text" : "Quay 3.17.3",
      "title" : "Details"
    }, {
      "category" : "legal_disclaimer",
      "text" : "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
      "title" : "Terms of Use"
    } ],
    "publisher" : {
      "category" : "vendor",
      "contact_details" : "https://access.redhat.com/security/team/contact/",
      "issuing_authority" : "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name" : "Red Hat Product Security",
      "namespace" : "https://www.redhat.com"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "https://access.redhat.com/errata/RHSA-2026:24833",
      "url" : "https://access.redhat.com/errata/RHSA-2026:24833"
    }, {
      "category" : "external",
      "summary" : "https://access.redhat.com/security/cve/CVE-2026-32590",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-32590"
    }, {
      "category" : "external",
      "summary" : "https://access.redhat.com/security/cve/CVE-2026-32591",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-32591"
    }, {
      "category" : "external",
      "summary" : "https://access.redhat.com/security/updates/classification/",
      "url" : "https://access.redhat.com/security/updates/classification/"
    }, {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24833.json"
    } ],
    "title" : "Red Hat Security Advisory: Red Hat Quay 3.17.3",
    "tracking" : {
      "current_release_date" : "2026-06-15T20:52:20+00:00",
      "generator" : {
        "date" : "2026-06-15T20:52:20+00:00",
        "engine" : {
          "name" : "Red Hat SDEngine",
          "version" : "5.0.0"
        }
      },
      "id" : "RHSA-2026:24833",
      "initial_release_date" : "2026-06-09T13:57:35+00:00",
      "revision_history" : [ {
        "date" : "2026-06-09T13:57:35+00:00",
        "number" : "1",
        "summary" : "Initial version"
      }, {
        "date" : "2026-06-15T18:22:58+00:00",
        "number" : "2",
        "summary" : "Last updated version"
      }, {
        "date" : "2026-06-15T20:52:20+00:00",
        "number" : "3",
        "summary" : "Last generated version"
      } ],
      "status" : "final",
      "version" : "3"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_name",
          "name" : "Red Hat Quay 3.17",
          "product" : {
            "name" : "Red Hat Quay 3.17",
            "product_id" : "Red Hat Quay 3.17",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:redhat:quay:3.17::el9"
            }
          }
        } ],
        "category" : "product_family",
        "name" : "Red Hat Quay"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
            "product_id" : "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-container-security-operator-bundle@sha256%3Ac7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763?arch=amd64&repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle&tag=1780949679"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
            "product_id" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-container-security-operator-rhel9@sha256%3Ae9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39?arch=amd64&repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9&tag=1780949098"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
            "product_id" : "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-bridge-operator-bundle@sha256%3Acb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55?arch=amd64&repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle&tag=1780949772"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
            "product_id" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-bridge-operator-rhel9@sha256%3A76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d?arch=amd64&repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9&tag=1780949101"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
            "product_id" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c?arch=amd64&repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8&tag=1780604082"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
            "product_id" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-builder-rhel9@sha256%3A118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d?arch=amd64&repository_url=registry.redhat.io/quay/quay-builder-rhel9&tag=1780603696"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
          "product" : {
            "name" : "registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
            "product_id" : "registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/clair-rhel9@sha256%3Ae45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2?arch=amd64&repository_url=registry.redhat.io/quay/clair-rhel9&tag=1780508896"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
            "product_id" : "registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-operator-bundle@sha256%3A9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9?arch=amd64&repository_url=registry.redhat.io/quay/quay-operator-bundle&tag=1780949884"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
            "product_id" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-operator-rhel9@sha256%3A235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366?arch=amd64&repository_url=registry.redhat.io/quay/quay-operator-rhel9&tag=1780949117"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
            "product_id" : "registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-rhel9@sha256%3A5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f?arch=amd64&repository_url=registry.redhat.io/quay/quay-rhel9&tag=1780604033"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "amd64"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
            "product_id" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-container-security-operator-rhel9@sha256%3A65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47?arch=arm64&repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9&tag=1780949098"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
            "product_id" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-bridge-operator-rhel9@sha256%3Aee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a?arch=arm64&repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9&tag=1780949101"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
            "product_id" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Ae95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241?arch=arm64&repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8&tag=1780604082"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
            "product_id" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-builder-rhel9@sha256%3A6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560?arch=arm64&repository_url=registry.redhat.io/quay/quay-builder-rhel9&tag=1780603696"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
          "product" : {
            "name" : "registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
            "product_id" : "registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/clair-rhel9@sha256%3Ac04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d?arch=arm64&repository_url=registry.redhat.io/quay/clair-rhel9&tag=1780508896"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
            "product_id" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-operator-rhel9@sha256%3A13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8?arch=arm64&repository_url=registry.redhat.io/quay/quay-operator-rhel9&tag=1780949117"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
            "product_id" : "registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-rhel9@sha256%3Aa86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7?arch=arm64&repository_url=registry.redhat.io/quay/quay-rhel9&tag=1780604033"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "arm64"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
            "product_id" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-container-security-operator-rhel9@sha256%3A2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9&tag=1780949098"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
            "product_id" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-bridge-operator-rhel9@sha256%3A38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9&tag=1780949101"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
            "product_id" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8&tag=1780604082"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
            "product_id" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-builder-rhel9@sha256%3A2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-builder-rhel9&tag=1780603696"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
          "product" : {
            "name" : "registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
            "product_id" : "registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
            "product_identification_helper" : {
              "purl" : "pkg:oci/clair-rhel9@sha256%3A9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5?arch=ppc64le&repository_url=registry.redhat.io/quay/clair-rhel9&tag=1780508896"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
            "product_id" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-operator-rhel9@sha256%3Ac87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-operator-rhel9&tag=1780949117"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
            "product_id" : "registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-rhel9@sha256%3A17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-rhel9&tag=1780604033"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "ppc64le"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
            "product_id" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-container-security-operator-rhel9@sha256%3A2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f?arch=s390x&repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9&tag=1780949098"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
            "product_id" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-bridge-operator-rhel9@sha256%3Afe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33?arch=s390x&repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9&tag=1780949101"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
            "product_id" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff?arch=s390x&repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8&tag=1780604082"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
            "product_id" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-builder-rhel9@sha256%3A86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15?arch=s390x&repository_url=registry.redhat.io/quay/quay-builder-rhel9&tag=1780603696"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
          "product" : {
            "name" : "registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
            "product_id" : "registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
            "product_identification_helper" : {
              "purl" : "pkg:oci/clair-rhel9@sha256%3A679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446?arch=s390x&repository_url=registry.redhat.io/quay/clair-rhel9&tag=1780508896"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
            "product_id" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-operator-rhel9@sha256%3A393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b?arch=s390x&repository_url=registry.redhat.io/quay/quay-operator-rhel9&tag=1780949117"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x",
          "product" : {
            "name" : "registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x",
            "product_id" : "registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x",
            "product_identification_helper" : {
              "purl" : "pkg:oci/quay-rhel9@sha256%3Ade281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2?arch=s390x&repository_url=registry.redhat.io/quay/quay-rhel9&tag=1780604033"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "s390x"
      } ],
      "category" : "vendor",
      "name" : "Red Hat"
    } ],
    "relationships" : [ {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x"
      },
      "product_reference" : "registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le"
      },
      "product_reference" : "registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64"
      },
      "product_reference" : "registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64"
      },
      "product_reference" : "registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64"
      },
      "product_reference" : "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le"
      },
      "product_reference" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64"
      },
      "product_reference" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64"
      },
      "product_reference" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x"
      },
      "product_reference" : "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64"
      },
      "product_reference" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x"
      },
      "product_reference" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le"
      },
      "product_reference" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64"
      },
      "product_reference" : "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64"
      },
      "product_reference" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le"
      },
      "product_reference" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64"
      },
      "product_reference" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x"
      },
      "product_reference" : "registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64"
      },
      "product_reference" : "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x"
      },
      "product_reference" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le"
      },
      "product_reference" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64"
      },
      "product_reference" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64"
      },
      "product_reference" : "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64"
      },
      "product_reference" : "registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64"
      },
      "product_reference" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64"
      },
      "product_reference" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x"
      },
      "product_reference" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le"
      },
      "product_reference" : "registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le"
      },
      "product_reference" : "registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64"
      },
      "product_reference" : "registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64 as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64"
      },
      "product_reference" : "registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x as a component of Red Hat Quay 3.17",
        "product_id" : "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x"
      },
      "product_reference" : "registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x",
      "relates_to_product_reference" : "Red Hat Quay 3.17"
    } ]
  },
  "vulnerabilities" : [ {
    "acknowledgments" : [ {
      "names" : [ "Antony Di Scala", "Michael Whale" ]
    } ],
    "cve" : "CVE-2026-32590",
    "cwe" : {
      "id" : "CWE-502",
      "name" : "Deserialization of Untrusted Data"
    },
    "discovery_date" : "2026-03-12T14:43:11.443000+00:00",
    "flags" : [ {
      "label" : "vulnerable_code_not_present",
      "product_ids" : [ "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le" ]
    } ],
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2446964"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "mirror-registry: remote code execution using pickle deserialization",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Exploitation requires valid login credentials. The attacker must be authenticated to the registry, either through the web interface or through a container tool such as Podman.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x" ],
      "known_not_affected" : [ "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-32590"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2446964",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2446964"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-32590",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-32590"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32590",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32590"
    } ],
    "release_date" : "2026-04-08T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-09T13:57:35+00:00",
      "details" : "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:24833"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.1,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "mirror-registry: remote code execution using pickle deserialization"
  }, {
    "acknowledgments" : [ {
      "names" : [ "Antony Di Scala", "Michael Whale" ]
    } ],
    "cve" : "CVE-2026-32591",
    "cwe" : {
      "id" : "CWE-918",
      "name" : "Server-Side Request Forgery (SSRF)"
    },
    "discovery_date" : "2026-03-12T15:09:38.210000+00:00",
    "flags" : [ {
      "label" : "vulnerable_code_not_present",
      "product_ids" : [ "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le" ]
    } ],
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2446965"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Exploitation requires the attacker to be authenticated as an organization administrator.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x" ],
      "known_not_affected" : [ "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-32591"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2446965",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-32591",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-32591"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
    } ],
    "release_date" : "2026-04-08T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-09T13:57:35+00:00",
      "details" : "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:24833"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 5.2,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "LOW",
        "privilegesRequired" : "HIGH",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
        "version" : "3.1"
      },
      "products" : [ "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:679ca71c057aa259037602d5048e980cf2ce2d4baf3705be67b1d5f77611a446_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9140673ad26107c3b712ebc5cdcc13a2a5b3e7ea9436236c48b7d84a4bada6e5_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c04663199f7acd4121f9adfb576555c31fbe8efd0f70c2b487255bababdc2b8d_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e45aa07ebc859af01c63f56b49af0ad5ec077d2e43133fa8084962027be61cc2_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cb1de43146fd653a585d34989bd09d6911a8d1ee1710bbb5a43243c46ad16b55_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:38e0f7faa1670ba3e735b4b471e5219d1e1d26491e0db773b0131273bd8a8986_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:76f859d0e15744c482e4477e2f5449041bdd2be92edde49534992f065750b40d_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:ee83f98402a38e194c836dc065b5e1d421b4f66e113679c7d26d684343d9340a_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:fe5a2456733463f133f7a437a68043b5d8f2cbe86a74733313e11dc5ded2fd33_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:00624a94a9c45d514eb09cdc85775ec2bfded9ddd0b64c5da61868f78977a16c_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:05abf1c01f198c8df515fa7448bc352b37b161a7e6eab7101bce54f1895cf0ff_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:9bbc85c8e428c4837aeff0670e26ae576ebaf3d85428939c8d90afa8f5f86f13_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e95a72e0e7f2b81fe7f0c762913492bcab9b3c87bdbcb25e7490d6f1b29ae241_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:118054e2330adc3e62351954dd2c77032667d339c179e3f2d3239673aefdb69d_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2f602291300ce78e1cd48a8b8e329c113f3a9578599d7c1a84c40f873a6dbb68_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:6f6b1330a2dd5b6935654ab57c634c5a48bccd339c5a2eed4ef619fe3d9c2560_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:86092ff3b8c8bcd3ca6ce548d7eaedc3773aeaa919dbec166a9926274c90cd15_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:c7827fe2034ee2d88d5cc9365f3f8ecc88431f2559742c48f7819ed08ba59763_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b72f06f32f712b4d15e2afef2f5e6d524c7a5044439f3cc188185f1e2bd164f_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2b94e6ae837e2ed18153451ac233ee947b932954dd826fcaed162123d0b6d6aa_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:65ccc872897544ca99937bf184d6ec74a963202fb8bcb258a700898e061b2a47_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e9ca0fbc73cb281418afa5fb4e42c011335f12f99a4b537fd06b02937a487c39_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:9e35a7389ecd676d5735a3a25117b61fc0e590acd4ec815a3b465934cd0578f9_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:13fbc1d51bb3223c9a0925967344c906bbf7020d9330bbea4fe1655a541807a8_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:235a82cfffe9d1a8d995770de6244b70a710c1abb5ef8a79a5f53aa7c45d4366_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:393c1a9f8626926bc883468b65736e6ec42cc02d7a989fddf39bf38ebc58e57b_s390x", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:c87ce55416458d4d37e40aba0155447dd0be2210eaaf1a89d5056331c4bcb2ae_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:17c8a5b1140935b38cea1dcb846049a3901f3f7932990a83f65e0fdce015cf78_ppc64le", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:5ffa091bf9859a0ad3902c92c71d6387ac68e358e9794c86709879e3fac1bb0f_amd64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:a86a0e490321c469e791ad78ecdb3e42f33ab882602a5da50f9996d41c001ee7_arm64", "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:de281a104a00886f8f3afb43422d6f147547afb4526c339e95dc06ff92085de2_s390x" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
  } ]
}