{
  "threat_severity" : "Important",
  "public_date" : "2025-07-08T21:39:59Z",
  "bugzilla" : {
    "description" : "helm.sh/helm/v3: Helm Chart Code Execution",
    "id" : "2378905",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2378905"
  },
  "cvss3" : {
    "cvss3_base_score" : "8.5",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-94",
  "details" : [ "Helm is a package manager for Charts for Kubernetes. Prior to 3.18.4, a specially crafted Chart.yaml file along with a specially linked Chart.lock file can lead to local code execution when dependencies are updated. Fields in a Chart.yaml file, that are carried over to a Chart.lock file when dependencies are updated and this file is written, can be crafted in a way that can cause execution if that same content were in a file that is executed (e.g., a bash.rc file or shell script). If the Chart.lock file is symlinked to one of these files updating dependencies will write the lock file content to the symlinked file. This can lead to unwanted execution. Helm warns of the symlinked file but did not stop execution due to symlinking. This issue has been resolved in Helm v3.18.4.", "A command injection vulnerability has been identified in Helm, a package manager for Kubernetes. An attacker can craft a malicious Chart.yaml file with specially linked dependencies in a Chart.lock file. If the Chart.lock file is a symbolic link to an executable file, such as a shell script, and a user attempts to update the dependencies, the crafted content is written to the symlinked file and executed. This can lead to local code execution on the system. This issue has been patched in Helm version 3.18.4, and users should update to this version to mitigate the risk." ],
  "statement" : "Although GitOps ships Helm, this product is not vulnerable to this vulnerability as ArgoCD doesn't use helm dependency update. Additionally ArgoCD scans the whole repository searching for symbolic links that eventually points to a out of bounds destination, this later feature ensures ArgoCD is not vulnerable for this issue. Given this information ArgoCD won't be updated to pull a new version of Helm in other versions than the currently latest upstream one.",
  "affected_release" : [ {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 8",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el8",
    "package" : "multicluster-engine-assisted-service-8-container-v2.7.6-2"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-addon-manager-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-assisted-image-service-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-assisted-installer-agent-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-assisted-installer-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-assisted-installer-controller-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-assisted-service-9-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-cluster-api-provider-agent-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-cluster-api-provider-kubevirt-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine/cluster-api-rhel9:v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-clusterclaims-controller-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-cluster-curator-controller-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-cluster-image-set-controller-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-clusterlifecycle-state-metrics-container-v2.7.6-4"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-cluster-proxy-addon-container-v2.7.6-4"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-cluster-proxy-container-v2.7.6-4"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-console-mce-container-v2.7.6-4"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-discovery-operator-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-hive-container-v2.7.6-4"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-hypershift-addon-operator-container-v2.7.6-4"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-hypershift-cli-container-v2.7.6-4"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-hypershift-operator-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-image-based-install-container-v2.7.6-11"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-kube-rbac-proxy-mce-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-managedcluster-import-controller-container-v2.7.6-4"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-managed-serviceaccount-container-v2.7.6-4"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-multicloud-manager-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-must-gather-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-operator-bundle-container-v2.7.6-9"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-operator-container-v2.7.6-5"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-placement-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-provider-credential-controller-container-v2.7.6-4"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-registration-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-registration-operator-container-v2.7.6-3"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18278",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine-work-container-v2.7.6-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "acm-cli-container-v2.12.5-4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "acm-cluster-permission-container-v2.12.5-4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "acm-governance-policy-addon-controller-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "acm-governance-policy-framework-addon-container-v2.12.5-4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "acm-grafana-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "acm-multicluster-observability-addon-container-v2.12.5-4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "acm-must-gather-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "acm-operator-bundle-container-v2.12.5-9"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "acm-prometheus-config-reloader-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "acm-prometheus-operator-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "acm-search-indexer-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "acm-search-v2-api-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "acm-search-v2-operator-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "acm-siteconfig-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "acm-volsync-addon-controller-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "cert-policy-controller-container-v2.12.5-4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "cluster-backup-operator-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "config-policy-controller-container-v2.12.5-4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "console-container-v2.12.5-5"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "endpoint-monitoring-operator-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "governance-policy-propagator-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "grafana-dashboard-loader-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "insights-client-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "insights-metrics-container-v2.12.5-4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "klusterlet-addon-controller-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "kube-rbac-proxy-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "kube-state-metrics-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "memcached-exporter-container-v2.12.5-4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "metrics-collector-container-v2.12.5-4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "multicloud-integrations-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "multiclusterhub-operator-container-v2.12.5-5"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "multicluster-observability-operator-container-v2.12.5-4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "multicluster-operators-application-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "multicluster-operators-channel-container-v2.12.5-4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "multicluster-operators-subscription-operator-container-v2.12.5-5"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "node-exporter-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "observatorium-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "observatorium-operator-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "prometheus-alertmanager-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "prometheus-container-v2.12.5-4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rbac-query-proxy-container-v2.12.5-4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/memcached-rhel9:v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "search-collector-container-v2.12.5-5"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "submariner-addon-container-v2.12.5-4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "thanos-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:18744",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "thanos-receive-controller-container-v2.12.5-3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "acm-cli-container-v2.13.4-14"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "acm-cluster-permission-container-v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "acm-governance-policy-addon-controller-container-v2.13.4-12"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "acm-governance-policy-framework-addon-container-v2.13.4-13"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "acm-grafana-container-v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "acm-multicluster-observability-addon-container-v2.13.4-14"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "acm-must-gather-container-v2.13.4-13"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "acm-operator-bundle-container-v2.13.4-22"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "acm-prometheus-config-reloader-container-v2.13.4-7"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "acm-prometheus-operator-container-v2.13.4-7"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "acm-search-indexer-container-v2.13.4-12"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "acm-search-v2-api-container-v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "acm-search-v2-operator-container-v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "acm-siteconfig-container-v2.13.4-9"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "acm-volsync-addon-controller-container-v2.13.4-9"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "cert-policy-controller-container-v2.13.4-13"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "cluster-backup-operator-container-v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "config-policy-controller-container-v2.13.4-13"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "console-container-v2.13.4-13"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "endpoint-monitoring-operator-container-v2.13.4-8"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "governance-policy-propagator-container-v2.13.4-12"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "grafana-dashboard-loader-container-v2.13.4-8"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "insights-client-container-v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "insights-metrics-container-v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "klusterlet-addon-controller-container-v2.13.4-10"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "kube-rbac-proxy-container-v2.13.4-10"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "kube-state-metrics-container-v2.13.4-12"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "memcached-exporter-container-v2.13.4-7"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "metrics-collector-container-v2.13.4-8"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "multicloud-integrations-container-v2.13.4-9"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "multiclusterhub-operator-container-v2.13.4-12"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "multicluster-observability-operator-container-v2.13.4-8"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "multicluster-operators-application-container-v2.13.4-8"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "multicluster-operators-channel-container-v2.13.4-8"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "multicluster-operators-subscription-operator-container-v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "node-exporter-container-v2.13.4-8"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "observatorium-container-v2.13.4-8"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "observatorium-operator-container-v2.13.4-13"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "prometheus-alertmanager-container-v2.13.4-7"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "prometheus-container-v2.13.4-9"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "rbac-query-proxy-container-v2.13.4-8"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "rhacm2/acm-flightctl-api-rhel9:v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "rhacm2/acm-flightctl-ocp-ui-rhel9:v2.13.4-10"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "rhacm2/acm-flightctl-periodic-rhel9:v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "rhacm2/acm-flightctl-ui-rhel9:v2.13.4-10"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "rhacm2/acm-flightctl-worker-rhel9:v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "rhacm2/memcached-rhel9:v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "search-collector-container-v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "submariner-addon-container-v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "thanos-container-v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:16113",
    "cpe" : "cpe:/a:redhat:acm:2.13::el9",
    "package" : "thanos-receive-controller-container-v2.13.4-11"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12",
    "release_date" : "2025-11-10T00:00:00Z",
    "advisory" : "RHSA-2025:19961",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-volsync-addon-controller-rhel9:sha256:4e0b821946ebb225851846f8b6472ff8b76b570ca53a17a17f591c0d1a7a436f"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12",
    "release_date" : "2025-12-03T00:00:00Z",
    "advisory" : "RHSA-2025:22684",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-volsync-addon-controller-rhel9:sha256:4e0b821946ebb225851846f8b6472ff8b76b570ca53a17a17f591c0d1a7a436f"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.14",
    "release_date" : "2025-10-30T00:00:00Z",
    "advisory" : "RHSA-2025:19335",
    "cpe" : "cpe:/a:redhat:acm:2.14::el9",
    "package" : "rhacm2/acm-volsync-addon-controller-rhel9:sha256:0fcfb11a3e8fd162b15b81bb5133549e8f21139ade68e4a66f0d1f216edc09bc"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.14",
    "release_date" : "2026-02-11T00:00:00Z",
    "advisory" : "RHSA-2026:2572",
    "cpe" : "cpe:/a:redhat:acm:2.14::el9",
    "package" : "rhacm2/multicloud-integrations-rhel9:sha256:46b615cf682815259b0c4b9e785d2f0b429726f75920f7ce9c31625ac86118b2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.14",
    "release_date" : "2026-02-11T00:00:00Z",
    "advisory" : "RHSA-2026:2572",
    "cpe" : "cpe:/a:redhat:acm:2.14::el9",
    "package" : "rhacm2/multicluster-operators-channel-rhel9:sha256:066f59015024fd839705ad52d1ce8a10e500040c3905b98bd5533e5dd0e268d7"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.14",
    "release_date" : "2026-02-11T00:00:00Z",
    "advisory" : "RHSA-2026:2572",
    "cpe" : "cpe:/a:redhat:acm:2.14::el9",
    "package" : "rhacm2/multicluster-operators-subscription-rhel9:sha256:91249fb15a33c0bf8b5bf3c0f236fd4fe272b9221f4fcfa6608e97ba5062c5f3"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.12",
    "release_date" : "2025-10-16T00:00:00Z",
    "advisory" : "RHSA-2025:17672",
    "cpe" : "cpe:/a:redhat:openshift:4.12::el9",
    "package" : "openshift4/ose-operator-sdk-rhel8:sha256:863a9233aefd67002705c85691eb74452d7a41dfcf72423dff251dc652338160"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.13",
    "release_date" : "2025-10-23T00:00:00Z",
    "advisory" : "RHSA-2025:18242",
    "cpe" : "cpe:/a:redhat:openshift:4.13::el9",
    "package" : "openshift4/ose-operator-sdk-rhel8:sha256:fc897ed2d1d89a346995121242f7da7d97dbb031f60db193015066aba49e086b"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.14",
    "release_date" : "2025-09-23T00:00:00Z",
    "advisory" : "RHSA-2025:16526",
    "cpe" : "cpe:/a:redhat:openshift:4.14::el8",
    "package" : "openshift4/ztp-site-generate-rhel8:sha256:6f2a3800843763cf34d412bfcdba4a8e4cdc6d48b5444b7bdf85a0d4fe412c19"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.14",
    "release_date" : "2025-09-25T00:00:00Z",
    "advisory" : "RHSA-2025:16166",
    "cpe" : "cpe:/a:redhat:openshift:4.14::el9",
    "package" : "openshift4/ose-operator-sdk-rhel8:sha256:2624e6923f1879a811d798ac4f9f97577732c2760e5c860bb25b614a97bc9aed"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2025-09-25T00:00:00Z",
    "advisory" : "RHSA-2025:16161",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el9",
    "package" : "openshift4/ose-operator-sdk-rhel8:sha256:4a21a76877c56a9f7ddc1eaa6dd5b0c01f66197e05d865d7dc60dd3eb6674c72"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.16",
    "release_date" : "2025-09-23T00:00:00Z",
    "advisory" : "RHSA-2025:16527",
    "cpe" : "cpe:/a:redhat:openshift:4.16::el8",
    "package" : "openshift4/ztp-site-generate-rhel8:sha256:380bf78c3effa9d716ded177f82246e456613ccfb27c7a75ddcdfa6426459fe8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.16",
    "release_date" : "2025-09-17T00:00:00Z",
    "advisory" : "RHSA-2025:15681",
    "cpe" : "cpe:/a:redhat:openshift:4.16::el9",
    "package" : "openshift4/ose-operator-sdk-rhel9:sha256:0db4c40580bab21ab06da9f657eeba182cfa215c0134a738630ab7b88ec29717"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.17",
    "release_date" : "2025-09-23T00:00:00Z",
    "advisory" : "RHSA-2025:16529",
    "cpe" : "cpe:/a:redhat:openshift:4.17::el8",
    "package" : "openshift4/ztp-site-generate-rhel8:sha256:d81f6e3975f5cf326cbaf3fff41774f2f4e70dedb7aada0c73053a638251c16a"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.17",
    "release_date" : "2025-09-10T00:00:00Z",
    "advisory" : "RHSA-2025:15345",
    "cpe" : "cpe:/a:redhat:openshift:4.17::el9",
    "package" : "openshift4/ose-operator-sdk-rhel9:sha256:1b9b8dfe44497a6ea78b58aed0184d79ec5612816f8dcfe1ebf60f21f3e07972"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.18",
    "release_date" : "2025-09-23T00:00:00Z",
    "advisory" : "RHSA-2025:16530",
    "cpe" : "cpe:/a:redhat:openshift:4.18::el8",
    "package" : "openshift4/ztp-site-generate-rhel8:sha256:0805f90c4a1bd0de2c2825865e1092c1568b01a97ed4a26a47283293d7fe9108"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.18",
    "release_date" : "2025-09-03T00:00:00Z",
    "advisory" : "RHSA-2025:14821",
    "cpe" : "cpe:/a:redhat:openshift:4.18::el9",
    "package" : "openshift4/ose-operator-sdk-rhel9:sha256:0457f7c5332d305c49659947798402ec3804f56a3408f7e716bbb3c8fb38167d"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.19",
    "release_date" : "2025-09-23T00:00:00Z",
    "advisory" : "RHSA-2025:16535",
    "cpe" : "cpe:/a:redhat:openshift:4.19::el8",
    "package" : "openshift4/ztp-site-generate-rhel8:sha256:a26870f0981a8f939a0ec7e2cbf794f3f4b7121802474a79570bdb44e61e2a2a"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.2",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:9562",
    "cpe" : "cpe:/a:redhat:openshift:4.20::el9",
    "package" : "openshift4/oc-mirror-plugin-rhel9:sha256:29bc5de46a34d5404c9c596b79e7d594efc3ff88ddf621e0eb45409c7143ed2a"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.2",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:9562",
    "cpe" : "cpe:/a:redhat:openshift:4.20::el9",
    "package" : "openshift4/ose-cluster-olm-rhel9-operator:sha256:b035a94ceca3c4d0e90042ca78fc7adf583e87fb03a9f0be1179701db23610cc"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.2",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:9562",
    "cpe" : "cpe:/a:redhat:openshift:4.20::el9",
    "package" : "openshift4/ose-console-rhel9:sha256:6b376ef0cfb708c11d74b6de0144815ce69c05794face083b721cb503c6daac5"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.2",
    "release_date" : "2025-10-21T00:00:00Z",
    "advisory" : "RHSA-2025:9562",
    "cpe" : "cpe:/a:redhat:openshift:4.20::el9",
    "package" : "openshift4/ose-olm-catalogd-rhel9:sha256:1721d005639721195ff9f8b6b3aa720f1a3826c4eeb6e3b411aac08ea8269deb"
  } ],
  "package_state" : [ {
    "product_name" : "Deployment Validation Operator",
    "fix_state" : "Affected",
    "package_name" : "dvo/deployment-validation-operator-bundle",
    "cpe" : "cpe:/a:redhat:deployment_validator_operator"
  }, {
    "product_name" : "Deployment Validation Operator",
    "fix_state" : "Affected",
    "package_name" : "dvo/deployment-validation-rhel8-operator",
    "cpe" : "cpe:/a:redhat:deployment_validator_operator"
  }, {
    "product_name" : "Migration Toolkit for Applications 7",
    "fix_state" : "Affected",
    "package_name" : "mta/mta-cli-rhel9",
    "cpe" : "cpe:/a:redhat:migration_toolkit_applications:7"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/addon-manager-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Not affected",
    "package_name" : "multicluster-engine/backplane-rhel8-operator",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Not affected",
    "package_name" : "multicluster-engine/backplane-rhel9-operator",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/cluster-proxy-rhel8",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/cluster-proxy-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Will not fix",
    "package_name" : "multicluster-engine/hypershift-addon-rhel8-operator",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Will not fix",
    "package_name" : "multicluster-engine/hypershift-addon-rhel9-operator",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/managedcluster-import-controller-rhel8",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/managedcluster-import-controller-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/managed-serviceaccount-rhel8",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/managed-serviceaccount-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/multicloud-manager-rhel8",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/multicloud-manager-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/placement-rhel8",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/placement-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/registration-operator-rhel8",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/registration-operator-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/registration-rhel8",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/registration-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/work-rhel8",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/work-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Global Hub",
    "fix_state" : "Not affected",
    "package_name" : "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_globalhub"
  }, {
    "product_name" : "Multicluster Global Hub",
    "fix_state" : "Not affected",
    "package_name" : "multicluster-globalhub/multicluster-globalhub-manager-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_globalhub"
  }, {
    "product_name" : "Multicluster Global Hub",
    "fix_state" : "Not affected",
    "package_name" : "multicluster-globalhub/multicluster-globalhub-operator-bundle",
    "cpe" : "cpe:/a:redhat:multicluster_globalhub"
  }, {
    "product_name" : "Multicluster Global Hub",
    "fix_state" : "Not affected",
    "package_name" : "multicluster-globalhub/multicluster-globalhub-rhel9-operator",
    "cpe" : "cpe:/a:redhat:multicluster_globalhub"
  }, {
    "product_name" : "OpenShift Service Mesh 2",
    "fix_state" : "Not affected",
    "package_name" : "openshift-service-mesh/istio-cni-rhel8",
    "cpe" : "cpe:/a:redhat:service_mesh:2"
  }, {
    "product_name" : "OpenShift Service Mesh 2",
    "fix_state" : "Not affected",
    "package_name" : "openshift-service-mesh/pilot-rhel8",
    "cpe" : "cpe:/a:redhat:service_mesh:2"
  }, {
    "product_name" : "OpenShift Service Mesh 2",
    "fix_state" : "Not affected",
    "package_name" : "openshift-service-mesh/proxyv2-rhel8",
    "cpe" : "cpe:/a:redhat:service_mesh:2"
  }, {
    "product_name" : "OpenShift Service Mesh 2",
    "fix_state" : "Not affected",
    "package_name" : "openshift-service-mesh/proxyv2-rhel9",
    "cpe" : "cpe:/a:redhat:service_mesh:2"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Not affected",
    "package_name" : "openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Not affected",
    "package_name" : "openshift-service-mesh/istio-cni-rhel9",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Not affected",
    "package_name" : "openshift-service-mesh/istio-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Not affected",
    "package_name" : "openshift-service-mesh/istio-pilot-rhel9",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Not affected",
    "package_name" : "openshift-service-mesh/istio-proxyv2-rhel9",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Not affected",
    "package_name" : "openshift-service-mesh/istio-rhel9-operator",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Not affected",
    "package_name" : "openshift-service-mesh/istio-sail-operator-bundle",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Affected",
    "package_name" : "rhacm2/acm-multicluster-observability-addon-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Affected",
    "package_name" : "rhacm2/acm-search-v2-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Not affected",
    "package_name" : "rhacm2/multiclusterhub-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Not affected",
    "package_name" : "advanced-cluster-security/rhacs-central-db-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Not affected",
    "package_name" : "advanced-cluster-security/rhacs-main-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Not affected",
    "package_name" : "advanced-cluster-security/rhacs-rhel8-operator",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Not affected",
    "package_name" : "advanced-cluster-security/rhacs-roxctl-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Not affected",
    "package_name" : "advanced-cluster-security/rhacs-scanner-v4-db-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Not affected",
    "package_name" : "advanced-cluster-security/rhacs-scanner-v4-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Build of Kueue",
    "fix_state" : "Not affected",
    "package_name" : "kueue/kueue-rhel9",
    "cpe" : "cpe:/a:redhat:kueue_operator:1"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-codeflare-operator-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-kf-notebook-controller-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-kuberay-operator-controller-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-kueue-controller-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-kueue-controller-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-mlmd-grpc-server-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-ml-pipelines-runtime-generic-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-mm-rest-proxy-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-modelmesh-serving-controller-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-model-registry-operator-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-model-registry-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-notebook-controller-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-training-operator-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-trustyai-service-operator-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/kube-compare-artifacts-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/metallb-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/metallb-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/oc-mirror-plugin-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-ansible-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-ansible-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-cluster-olm-operator-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-console",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-helm-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-helm-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-olm-catalogd-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-olm-rukpak-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-olm-rukpak-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Will not fix",
    "package_name" : "openshift-gitops-1/argocd-extensions-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Not affected",
    "package_name" : "openshift-gitops-1/argocd-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Not affected",
    "package_name" : "openshift-gitops-1/argocd-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Affected",
    "package_name" : "openshift-gitops-1/argo-rollouts-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Will not fix",
    "package_name" : "openshift-gitops-1/console-plugin-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Will not fix",
    "package_name" : "openshift-gitops-1/dex-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Will not fix",
    "package_name" : "openshift-gitops-1/gitops-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Will not fix",
    "package_name" : "openshift-gitops-1/gitops-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Will not fix",
    "package_name" : "openshift-gitops-1/must-gather-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat Trusted Application Pipeline",
    "fix_state" : "Will not fix",
    "package_name" : "rhtap-cli/rhtap-cli-rhel9",
    "cpe" : "cpe:/a:redhat:trusted_application_pipeline:1"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2025-53547\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-53547\nhttps://github.com/helm/helm/commit/4b8e61093d8f579f1165cdc6bd4b43fa5455f571\nhttps://github.com/helm/helm/security/advisories/GHSA-557j-xg8c-q2mm" ],
  "name" : "CVE-2025-53547",
  "mitigation" : {
    "value" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
    "lang" : "en:us"
  },
  "csaw" : false
}