{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.10.8 is now available with bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.10.8",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHBA-2025:1077",
        "url": "https://access.redhat.com/errata/RHBA-2025:1077"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_1077.json"
      }
    ],
    "title": "Red Hat Bug Fix Advisory: Red Hat Quay v3.10.8 bug fix release",
    "tracking": {
      "current_release_date": "2026-08-21T20:39:27+00:00",
      "generator": {
        "date": "2026-08-21T20:39:27+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHBA-2025:1077",
      "initial_release_date": "2025-02-06T09:14:40+00:00",
      "revision_history": [
        {
          "date": "2025-02-06T09:14:40+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-02-06T09:14:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-21T20:39:27+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Quay v3",
                "product": {
                  "name": "Quay v3",
                  "product_id": "8Base-Quay-3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd?arch=s390x&repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle&tag=v3.10.8-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3?arch=s390x&repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8&tag=v3.10.8-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x",
                  "product_id": "quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25?arch=s390x&repository_url=registry.redhat.io/quay/quay-builder-rhel8&tag=v3.10.8-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe?arch=s390x&repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8&tag=v3.10.8-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x",
                "product": {
                  "name": "quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x",
                  "product_id": "quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a?arch=s390x&repository_url=registry.redhat.io/quay/clair-rhel8&tag=v3.10.8-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092?arch=s390x&repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle&tag=v3.10.8-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed?arch=s390x&repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8&tag=v3.10.8-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x",
                  "product_id": "quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec?arch=s390x&repository_url=registry.redhat.io/quay/quay-operator-bundle&tag=v3.10.8-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x",
                  "product_id": "quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361?arch=s390x&repository_url=registry.redhat.io/quay/quay-operator-rhel8&tag=v3.10.8-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x",
                "product": {
                  "name": "quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x",
                  "product_id": "quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97?arch=s390x&repository_url=registry.redhat.io/quay/quay-rhel8&tag=v3.10.8-6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle&tag=v3.10.8-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8&tag=v3.10.8-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le",
                  "product_id": "quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-builder-rhel8&tag=v3.10.8-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8&tag=v3.10.8-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le",
                "product": {
                  "name": "quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le",
                  "product_id": "quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436?arch=ppc64le&repository_url=registry.redhat.io/quay/clair-rhel8&tag=v3.10.8-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle&tag=v3.10.8-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8&tag=v3.10.8-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le",
                  "product_id": "quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-operator-bundle&tag=v3.10.8-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le",
                  "product_id": "quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-operator-rhel8&tag=v3.10.8-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le",
                "product": {
                  "name": "quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le",
                  "product_id": "quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-rhel8&tag=v3.10.8-6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946?arch=amd64&repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle&tag=v3.10.8-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20?arch=amd64&repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8&tag=v3.10.8-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64",
                  "product_id": "quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf?arch=amd64&repository_url=registry.redhat.io/quay/quay-builder-rhel8&tag=v3.10.8-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb?arch=amd64&repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8&tag=v3.10.8-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64",
                "product": {
                  "name": "quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64",
                  "product_id": "quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825?arch=amd64&repository_url=registry.redhat.io/quay/clair-rhel8&tag=v3.10.8-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568?arch=amd64&repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle&tag=v3.10.8-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2?arch=amd64&repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8&tag=v3.10.8-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64",
                  "product_id": "quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d?arch=amd64&repository_url=registry.redhat.io/quay/quay-operator-bundle&tag=v3.10.8-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64",
                  "product_id": "quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c?arch=amd64&repository_url=registry.redhat.io/quay/quay-operator-rhel8&tag=v3.10.8-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64",
                "product": {
                  "name": "quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64",
                  "product_id": "quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed?arch=amd64&repository_url=registry.redhat.io/quay/quay-rhel8&tag=v3.10.8-6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x"
        },
        "product_reference": "quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le"
        },
        "product_reference": "quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64"
        },
        "product_reference": "quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64"
        },
        "product_reference": "quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x"
        },
        "product_reference": "quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le"
        },
        "product_reference": "quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-45337",
      "cwe": {
        "id": "CWE-285",
        "name": "Improper Authorization"
      },
      "discovery_date": "2024-12-11T19:00:54.247490+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331720"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is classified as important rather than critical because it does not directly enable unauthorized access but rather introduces a risk of authorization bypass if the application or library misuses the PublicKeyCallback API. The vulnerability relies on incorrect assumptions made by the application when handling the sequence or state of keys provided during SSH authentication. Properly implemented systems that use the Permissions field or avoid relying on external state remain unaffected. Additionally, the vulnerability does not allow direct exploitation to gain control over a system without the presence of insecure logic in the application's handling of authentication attempts.\n\n\nRed Hat Enterprise Linux(RHEL) 8 & 9 and Red Hat Openshift marked as not affected as it was determined that the problem function `ServerConfig.PublicKeyCallback`, as noted in the CVE-2024-45337 issue, is not called by Podman, Buildah, containers-common, or the gvisor-tap-vsock projects.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le",
          "8Base-Quay-3:quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45337"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331720",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45337",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909",
          "url": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/635315",
          "url": "https://go.dev/cl/635315"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/70779",
          "url": "https://go.dev/issue/70779"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ",
          "url": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2024-3321",
          "url": "https://pkg.go.dev/vuln/GO-2024-3321"
        }
      ],
      "release_date": "2024-12-11T18:55:58.506000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-02-06T09:14:40+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:1077"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto"
    },
    {
      "cve": "CVE-2024-56201",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2024-12-23T16:00:38.768252+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2333854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja's sandbox being used. An attacker needs to be able to control both the filename and the contents of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates where the template author can also choose the template filename.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jinja2: Jinja has a sandbox breakout through malicious filenames",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability has rated as a IMPORTANT flaw because an attacker controlling both the template content and filename to execute arbitrary Python code, bypassing the sandbox.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le",
          "8Base-Quay-3:quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-56201"
        },
        {
          "category": "external",
          "summary": "RHBZ#2333854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-56201",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-56201"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-56201",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56201"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f",
          "url": "https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/issues/1792",
          "url": "https://github.com/pallets/jinja/issues/1792"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/releases/tag/3.1.5",
          "url": "https://github.com/pallets/jinja/releases/tag/3.1.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699",
          "url": "https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699"
        }
      ],
      "release_date": "2024-12-23T15:37:36.110000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-02-06T09:14:40+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:1077"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerabilty restrict user-controlled template filenames, ensuring they follow a predefined templates.",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jinja2: Jinja has a sandbox breakout through malicious filenames"
    },
    {
      "cve": "CVE-2024-56326",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code ('Code Injection')"
      },
      "discovery_date": "2024-12-23T16:00:46.619763+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2333856"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates. Jinja's sandbox does catch calls to str.format and ensures they don't escape the sandbox. However, storing a reference to a malicious string's format method is possible, then passing that to a filter that calls it. No such filters are built into Jinja but could be present through custom filters in an application. After the fix, such indirect calls are also handled by the sandbox.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jinja2: Jinja has a sandbox breakout through indirect reference to format method",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Moderate due to an oversight in Jinja's sandbox environment, allowing attackers to execute arbitrary Python code through controlled template content. This requires control over template content, making exploitation possible only in specific applications, thus limiting its overall impact.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le",
          "8Base-Quay-3:quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-56326"
        },
        {
          "category": "external",
          "summary": "RHBZ#2333856",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333856"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-56326",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-56326"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-56326",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56326"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4",
          "url": "https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/releases/tag/3.1.5",
          "url": "https://github.com/pallets/jinja/releases/tag/3.1.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h",
          "url": "https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h"
        }
      ],
      "release_date": "2024-12-23T15:43:49.400000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-02-06T09:14:40+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:1077"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:17b352e88ffa8864ac847ae0a76cddc92e87384863c9fde2471462099fcce86a_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:42f3eeed152b34c28380de2da842c408f2f57726bb0da5add5fc8e9b5f9ae436_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:9deabbf1ccb7d69e2b419e15afe47d797f99851b1a245f4a0884727201209825_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:15bbf14bed08a24b8f23a104f6444100105bea1fd6b232e1f8981c82838849d9_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:5e2f7e76a088e7a9d7abc2169c4bca169032f2704921fcda7494f3fe1729e4dd_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ed14135f126057c2f55c685426aa03dcde3633b9ab911f6c49ad57fb85cf2946_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a9bd7232653e7254f7fbbcadbfae0b929a868fa02ab083314d575a783901b3e3_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:ae2661b73d422924ba37ed1100b4c1bfc013441d5abfcf53108ef4b2942ca5ff_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:f3850ff713a9e99ca02005dae6c6258f7cd2668493993b8cd6d14f50c15a6f20_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:55dbe229e33a66b6b9ee53e24b6f7b68ede43a35a58ac19cbe0c28a0197abebe_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9614841fac14766d130fb90a18ee53c7c574d1db0ac66aa38a99371af9d51b0c_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ac4c17d41492322051ad844e5df5f5074e59ba5e325ac950baba6c6858589deb_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:01842d2c486065144177385dd635c16ed1fb58aa07f7e2ebab74348c72e644e6_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ccb65727856c6819aa77024d62f2e34f6d321be8294552a2656acefe5b35dacf_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:e2f040db721a21f9e38cd3f4e1c7adc203a0fa89993efde704844d272bdf5b25_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:29942e0de728b77dd24b373e0bf68895a7a96ace0e234d1be15c310752e6d568_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:79903fbe59a799b7756520f0195d9e0cfcf24d6b8526af5d279d27bb0eb25092_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b74a635e4559b00e4608d2141caae3d4489e9fedbd8b39de6a2707377ec8c106_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:02fb719b31e51c10d979ea22442dd8bd1aa89ebe44c844fc33a91c447ba6bbed_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:07f949f97eeb4b8887cccdbb069438810cf4cf923646a12bdac45c8836f6cf22_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:7ce8c1ae94a77bcaa8758563ea0e2a6aed3ba207e8703e1f14cb0847a66a6fd2_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:57316a19aefe1f0083542ef4e9e337cd8b580b017885e82e385ef2bd0424fcec_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:9c273c3fd74d4274e27927bf5833b49f0cafb12984de02b5c46d58f2956b1b5d_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:b145e116e22f4bbf6d8b0887211c945b11f54bbbe8a68904bc9ba9b3224c3a9c_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4ba9a707675ca882261fb4023925e2e662423cc90fe417f6b2cf22d5751bf361_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:71899ec83a0513267a8d7b1d85a14494e49ecffd5cb52fb3c7716ef75786c18c_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:7cc543fe1d9c614bf36a183aa3e2a8e6d12f3a947512a667f0786f7284d56894_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:2a5588311d09e7804562695b8e1005e15c5515a50ba5583892d3cc5ea6bc84ed_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:6b2d915653b789b757f485e3821a6dc78fce8223d96a6ba080db9dfdcf20ed97_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:731d4bc986148da2202be34035da415451577e62b5d597fbed0d668b4f018c88_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jinja2: Jinja has a sandbox breakout through indirect reference to format method"
    }
  ]
}