csaf_bsi_aggregator:rhsa-2026:70006

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Virtualization release v4.14 is now available with updates to packages and images that fix several bugs and add enhancements.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.14 images.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:70006",
        "url": "https://access.redhat.com/errata/RHSA-2026:70006"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70006.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Virtualization v4.14 Images",
    "tracking": {
      "current_release_date": "2026-09-22T13:02:48+00:00",
      "generator": {
        "date": "2026-09-22T13:02:48+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:70006",
      "initial_release_date": "2026-09-22T10:01:59+00:00",
      "revision_history": [
        {
          "date": "2026-09-22T10:01:59+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-22T10:02:04+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-22T13:02:48+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Container Native Virtualization 4.14",
                "product": {
                  "name": "Red Hat Container Native Virtualization 4.14",
                  "product_id": "Red Hat Container Native Virtualization 4.14",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:container_native_virtualization:4.14::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Container Native Virtualization"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multus-dynamic-networks-rhel9@sha256%3A861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9&tag=1789537160"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/ovs-cni-plugin-rhel9@sha256%3Af15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9&tag=1789537009"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/bridge-marker-rhel9@sha256%3A35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/bridge-marker-rhel9&tag=1789536904"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-network-addons-operator-rhel9@sha256%3A3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9&tag=1789537318"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cnv-containernetworking-plugins-rhel9@sha256%3A757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9&tag=1789537010"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubemacpool-rhel9@sha256%3A014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/kubemacpool-rhel9&tag=1789537321"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubesecondarydns-rhel9@sha256%3Aec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef?arch=amd64&repository_url=registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9&tag=1789537163"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multus-dynamic-networks-rhel9@sha256%3A504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9&tag=1789537160"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/ovs-cni-plugin-rhel9@sha256%3Ac6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9&tag=1789537009"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/bridge-marker-rhel9@sha256%3A530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/bridge-marker-rhel9&tag=1789536904"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-network-addons-operator-rhel9@sha256%3Ae5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9&tag=1789537318"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cnv-containernetworking-plugins-rhel9@sha256%3A37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9&tag=1789537010"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubemacpool-rhel9@sha256%3A4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/kubemacpool-rhel9&tag=1789537321"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubesecondarydns-rhel9@sha256%3Af87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115?arch=arm64&repository_url=registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9&tag=1789537163"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64 as a component of Red Hat Container Native Virtualization 4.14",
          "product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64 as a component of Red Hat Container Native Virtualization 4.14",
          "product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64 as a component of Red Hat Container Native Virtualization 4.14",
          "product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64 as a component of Red Hat Container Native Virtualization 4.14",
          "product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64 as a component of Red Hat Container Native Virtualization 4.14",
          "product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64 as a component of Red Hat Container Native Virtualization 4.14",
          "product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64 as a component of Red Hat Container Native Virtualization 4.14",
          "product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64 as a component of Red Hat Container Native Virtualization 4.14",
          "product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64 as a component of Red Hat Container Native Virtualization 4.14",
          "product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64 as a component of Red Hat Container Native Virtualization 4.14",
          "product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64 as a component of Red Hat Container Native Virtualization 4.14",
          "product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64 as a component of Red Hat Container Native Virtualization 4.14",
          "product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64 as a component of Red Hat Container Native Virtualization 4.14",
          "product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64 as a component of Red Hat Container Native Virtualization 4.14",
          "product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33818",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')"
      },
      "discovery_date": "2026-08-13T22:12:37.151735+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64"
        ],
        "known_not_affected": [
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/814980",
          "url": "https://go.dev/cl/814980"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80405",
          "url": "https://go.dev/issue/80405"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5972",
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "release_date": "2026-08-13T21:58:52.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-22T10:01:59+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
    },
    {
      "cve": "CVE-2026-56859",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')"
      },
      "discovery_date": "2026-08-13T22:16:52.493058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64"
        ],
        "known_not_affected": [
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803320",
          "url": "https://go.dev/cl/803320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80481",
          "url": "https://go.dev/issue/80481"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6088",
          "url": "https://pkg.go.dev/vuln/GO-2026-6088"
        }
      ],
      "release_date": "2026-08-13T21:58:52.959000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-22T10:01:59+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70006"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
    },
    {
      "cve": "CVE-2026-56860",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:13:18.319384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments ('..') may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64"
        ],
        "known_not_affected": [
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64",
          "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803681",
          "url": "https://go.dev/cl/803681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80494",
          "url": "https://go.dev/issue/80494"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6218",
          "url": "https://pkg.go.dev/vuln/GO-2026-6218"
        }
      ],
      "release_date": "2026-08-13T21:58:53.731000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-22T10:01:59+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64",
            "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
    }
  ]
}