{"id":"EUVD-2022-0789","enisaUuid":"b75b3f5a-c431-3b34-a643-34a309b50c4f","description":"Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim\u0027s browser (effectively serving as XSS).","datePublished":"Sep 30, 2020, 12:30:56 PM","dateUpdated":"Oct 8, 2026, 9:13:55 PM","baseScore":null,"references":"https://www.npmjs.com/advisories/1316\nhttps://www.npmjs.com/advisories/1324\nhttps://snyk.io/vuln/SNYK-JS-HANDLEBARS-534478\n","aliases":"CVE-2019-20920\nGHSA-3cqr-58rm-57f8\n","assigner":"mitre","epss":3.15,"enisaIdProduct":[{"id":"52729a55-5211-34a6-8c19-4465a8634e02","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"422f1121-0628-371d-9f17-393904debbe0","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"00557768-b2f4-3530-9b75-17bfbe671d77","vulnerability":{"id":"GHSA-3cqr-58rm-57f8","description":"Arbitrary Code Execution in Handlebars","datePublished":"Feb 10, 2022, 8:38:19 PM","dateUpdated":"Apr 22, 2021, 11:38:32 PM","baseScore":null,"references":"https://nvd.nist.gov/vuln/detail/CVE-2019-20920\nhttps://github.com/handlebars-lang/handlebars.js/commit/156061eb7707575293613d7fdf90e2bdaac029ee\nhttps://github.com/handlebars-lang/handlebars.js/commit/d54137810a49939fd2ad01a91a34e182ece4528e\nhttps://snyk.io/vuln/SNYK-JS-HANDLEBARS-534478\nhttps://www.npmjs.com/advisories/1316\nhttps://www.npmjs.com/advisories/1324\nhttps://www.npmjs.com/package/handlebars\n","enisa_id":"EUVD-2022-0789\n","aliases":"CVE-2019-20920\nGHSA-3cqr-58rm-57f8\n","epss":0.0,"dataProcessed":"Apr 21, 2026, 4:04:19 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"a18e2327-3895-3865-896c-706d0ee69eac","vulnerability":{"id":"CVE-2019-20920","description":"Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim\u0027s browser (effectively serving as XSS).","datePublished":"Sep 30, 2020, 12:30:56 PM","dateUpdated":"Oct 8, 2026, 9:13:55 PM","status":"PUBLISHED","baseScore":null,"references":"https://www.npmjs.com/advisories/1316\nhttps://www.npmjs.com/advisories/1324\nhttps://snyk.io/vuln/SNYK-JS-HANDLEBARS-534478\n","enisa_id":"EUVD-2022-0789\n","assigner":"mitre","epss":3.15,"dataProcessed":"Nov 5, 2026, 7:19:24 AM","vulnerabilityProduct":[{"id":"2a9fc47e-0a81-3659-9938-ae847a2aea1f","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"9888f267-50be-3cc3-a1a1-fb2a0a8ead79","vendor":{"name":"n/a"}}]}}],"enisaIdAdvisory":[{"id":"048b4e18-729e-3cdd-a5ba-925d8ac06205","advisory":{"id":"RHSA-2020:5179","description":"Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update","summary":"An update is now available for Red Hat Virtualization Engine 4.4.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"Nov 24, 2020, 1:10:41 PM","dateUpdated":"Oct 29, 2026, 6:23:42 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2020:5179\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5179.json\n","aliases":"CVE-2019-20920\nCVE-2019-20922\nCVE-2020-8203\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"020d4d86-7c72-3927-a1a6-fe8f8d0c8865","product":{"name":"ovirt-engine-dwh-setup-0:4.4.3.1-1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"073322b0-fd38-34b0-bbc5-83ff503a8879","product":{"name":"ovirt-engine-dbscripts-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"1056815b-6e51-3f34-8d7b-8c41eeebb579","product":{"name":"ovirt-engine-ui-extensions-0:1.2.4-1.el8ev.src","vendor":{"name":"Red Hat"}}},{"id":"24ba7c47-532e-3853-98f4-038493eaf42c","product":{"name":"ovirt-engine-setup-plugin-ovirt-engine-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"28c83180-2160-327b-904a-3faacac7c1b8","product":{"name":"rhvm-branding-rhv-0:4.4.6-1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"31626bce-a104-318c-9dce-ffbc3458ab17","product":{"name":"ovirt-engine-setup-plugin-imageio-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"31d5404a-02f3-3b34-b26c-a6de0a0d4cb6","product":{"name":"ovirt-engine-setup-plugin-ovirt-engine-common-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"35202ae0-a590-3ccd-9446-5c5d328cb9dc","product":{"name":"rhvm-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"3548afdd-8605-38dc-8487-6b6e33e2d96f","product":{"name":"ovirt-engine-extension-aaa-ldap-0:1.4.2-1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"39a6dc18-d87a-386c-9f37-2fb98d51a9e9","product":{"name":"ovirt-engine-vmconsole-proxy-helper-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"46d73313-c8ec-33a3-9f21-c14dd0153576","product":{"name":"ovirt-log-collector-0:4.4.4-1.el8ev.src","vendor":{"name":"Red Hat"}}},{"id":"54075343-1d2b-3d06-9266-c6ba38b238fb","product":{"name":"ovirt-engine-setup-plugin-websocket-proxy-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"58a0c854-fe80-3f8d-94b0-a5d8de2d6e8d","product":{"name":"ovirt-engine-metrics-0:1.4.2.1-1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"672327a0-9c86-3fea-91e7-726235aefc36","product":{"name":"RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4","vendor":{"name":"Red Hat"}}},{"id":"6905906d-271a-39fd-86a5-c6de5e8142f2","product":{"name":"ovirt-engine-extension-aaa-ldap-setup-0:1.4.2-1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"6d6408a9-961b-3342-a5ba-d8754e9dd859","product":{"name":"ovirt-web-ui-0:1.6.5-1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"6f72785c-4642-3dbc-99c9-9ae133311651","product":{"name":"ovirt-engine-extension-logger-log4j-0:1.1.1-1.el8ev.src","vendor":{"name":"Red Hat"}}},{"id":"77a28c39-8574-3352-881c-1ffe338af31f","product":{"name":"ovirt-engine-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"8e8c8a80-ca75-3df5-a773-f48436dafb86","product":{"name":"ovirt-engine-tools-backup-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"94d73b14-d57a-3ac2-85e3-84f6d2961f53","product":{"name":"ovirt-log-collector-0:4.4.4-1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"9ec8dce4-a444-32c9-bd1f-3944968ad3e0","product":{"name":"engine-db-query-0:1.6.2-1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"a30780a6-e41c-3503-aa80-afb035696d76","product":{"name":"rhv-log-collector-analyzer-0:1.0.5-1.el8ev.src","vendor":{"name":"Red Hat"}}},{"id":"a411ec42-7d32-3083-81f6-9cbbbfb69004","product":{"name":"ovirt-engine-setup-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"a6f4a3bc-41c4-3b60-9c10-64ee43d3b12e","product":{"name":"ovirt-engine-dwh-0:4.4.3.1-1.el8ev.src","vendor":{"name":"Red Hat"}}},{"id":"a814038d-6023-3d91-b24f-31ae9ec60c2d","product":{"name":"ovirt-engine-metrics-0:1.4.2.1-1.el8ev.src","vendor":{"name":"Red Hat"}}},{"id":"af752d7c-ecf2-3de4-a834-b74f7702af3b","product":{"name":"python3-ovirt-engine-lib-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"b0e2634f-b727-3aa2-9de5-0e6ce1aed21e","product":{"name":"rhvm-branding-rhv-0:4.4.6-1.el8ev.src","vendor":{"name":"Red Hat"}}},{"id":"b46d9eae-67e5-3f2e-9364-51ec20fc487b","product":{"name":"ovirt-engine-0:4.4.3.8-0.1.el8ev.src","vendor":{"name":"Red Hat"}}},{"id":"ba30a564-23d5-36d4-a184-d493c6ecfcf5","product":{"name":"ovirt-engine-health-check-bundler-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"c19bcc71-c7bb-3f37-a551-8ec0979325a0","product":{"name":"ovirt-engine-extension-logger-log4j-0:1.1.1-1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"c1c39529-babb-361c-ad9f-5ab5a6e6c180","product":{"name":"ovirt-engine-webadmin-portal-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"c1f9135b-87e1-3ba2-94a7-db792c9c9451","product":{"name":"ovirt-engine-websocket-proxy-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"c4b5c7a4-3418-3fc8-a043-b955e4bf7a83","product":{"name":"ovirt-engine-dwh-grafana-integration-setup-0:4.4.3.1-1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"c95c081c-7906-357a-913b-bfada7f50d82","product":{"name":"engine-db-query-0:1.6.2-1.el8ev.src","vendor":{"name":"Red Hat"}}},{"id":"cb2f2f68-bebf-3e5c-8c5e-a0068f7a5366","product":{"name":"ovirt-engine-extension-aaa-ldap-0:1.4.2-1.el8ev.src","vendor":{"name":"Red Hat"}}},{"id":"cdbd8887-2e2c-33b4-855d-ac7fe4d62046","product":{"name":"ovirt-engine-dwh-0:4.4.3.1-1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"d1cc025a-9048-3b03-b8ac-8437eb62822c","product":{"name":"ovirt-engine-tools-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"d333230b-2594-3f50-b0cb-c2d6954fc00c","product":{"name":"ovirt-engine-ui-extensions-0:1.2.4-1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"d6dccee5-75a0-3087-a6ec-d2ce0fb7661f","product":{"name":"ovirt-engine-setup-base-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"ebd673f7-93b6-381b-9832-d0dc883b5c7c","product":{"name":"ovirt-engine-setup-plugin-vmconsole-proxy-helper-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"ee64a5fb-a4ca-35dd-829c-80c7a8dcb433","product":{"name":"ovirt-web-ui-0:1.6.5-1.el8ev.src","vendor":{"name":"Red Hat"}}},{"id":"ef1dfe77-77f2-3136-881b-39a49f481533","product":{"name":"ovirt-engine-backend-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"ef8876a4-9419-3afb-9d47-3f57987deb2e","product":{"name":"rhv-log-collector-analyzer-0:1.0.5-1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"fb5d81e5-60ee-3876-b5ab-e9d8223f8604","product":{"name":"ovirt-engine-setup-plugin-cinderlib-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}},{"id":"fd332c1b-2019-3a5e-8e25-9cf6b559693a","product":{"name":"ovirt-engine-restapi-0:4.4.3.8-0.1.el8ev.noarch","vendor":{"name":"Red Hat"}}}]}},{"id":"0cc2b915-198a-3537-be82-bf56cb62a97e","advisory":{"id":"RHSA-2023:1334","description":"Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.2 security update","summary":"An update is now available for Red Hat Process Automation Manager.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"Mar 20, 2023, 9:15:52 AM","dateUpdated":"Aug 4, 2026, 9:40:13 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2023:1334\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1334.json\n","aliases":"CVE-2017-12629\nCVE-2018-1000134\nCVE-2019-19919\nCVE-2019-20920\nCVE-2019-20922\nCVE-2021-23369\nCVE-2021-23383\nCVE-2021-26291\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"01168686-1562-3ea3-b747-624a920cbb8e","product":{"name":"RHPAM 7.13.1 async","vendor":{"name":"Red Hat"}}}]}},{"id":"12eb6191-b50a-3801-9d22-0e4695a5de2c","advisory":{"id":"RHSA-2021:2500","description":"Red Hat Security Advisory: Red Hat OpenShift Enterprise security and bug fix update","summary":"Red Hat OpenShift Container Platform release 4.6.36 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.","datePublished":"Jun 29, 2021, 6:30:05 AM","dateUpdated":"Jul 3, 2026, 2:09:57 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2021:2500\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2500.json\n","aliases":"CVE-2019-20920\nCVE-2019-20922\nCVE-2021-23369\nCVE-2021-23383\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0636000f-b387-3e31-9de2-5896bfd4e5da","product":{"name":"openshift4/ose-jenkins-agent-nodejs-10-rhel8@sha256:6a9a798c1b961fb17f1685dc3e8b4c8380fb2d5efc59f9f611ac9494793e5b01_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"2073df98-e4bc-3da9-a99a-544951099f46","product":{"name":"openshift4/ose-elasticsearch-operator@sha256:0aacdde0fe2cd3e3332d75f557a5127e81f22543d403286b563d5b53907fabbc_s390x","vendor":{"name":"Red Hat"}}},{"id":"248ffb75-3aa6-3f65-9fda-5d25433aa1e8","product":{"name":"openshift4/ose-logging-fluentd@sha256:402a4a1cff69e71f4f6748c2cfb41577d884d3336bba6097e35fe93bcf7d0e5a_amd64","vendor":{"name":"Red Hat"}}},{"id":"2b0233fb-f033-371b-93a5-4783a40837e7","product":{"name":"openshift4/ose-cluster-logging-operator@sha256:f9003b1a4d6f0a2cc033f4d39e25592c3a509393ba13e857c1ad4251db9045ca_s390x","vendor":{"name":"Red Hat"}}},{"id":"3989191e-d7ae-3a91-bf2a-50777e24b23b","product":{"name":"openshift4/ose-elasticsearch-operator@sha256:183a9a68771f4685064abcf6e4df19efcc9597eee3d140d05194db183327e9c5_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"3d10bde6-aecb-3e1f-bc9e-a12963e18920","product":{"name":"openshift4/ose-logging-kibana6@sha256:dcad4765e041cee0ccc825603f7a4c3250ffd3577a66778f5140dfee58fdbc2c_amd64","vendor":{"name":"Red Hat"}}},{"id":"4581df7e-745c-3f70-8f14-c9a4af130025","product":{"name":"openshift4/ose-logging-curator5@sha256:c740bbd097ad59afda31268852167ef831ea68cb5890984482d0749dfa68de97_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"46d465a1-16e6-3f78-9309-0d6e436236f7","product":{"name":"openshift4/ose-logging-fluentd@sha256:511b93c6e86d30f43d31ef06d1b998202d1f7ef3517a0d0432bbef97f3da8b51_s390x","vendor":{"name":"Red Hat"}}},{"id":"49500069-2f2e-31d8-9d9a-6d63842646fd","product":{"name":"openshift4/ose-logging-elasticsearch6@sha256:9422f9defd336d0f88bfb90c30ece336f06dd4524fdcc98a2d73d0fcfb7921bc_s390x","vendor":{"name":"Red Hat"}}},{"id":"5a274451-3850-357c-9678-81020aca62cd","product":{"name":"openshift4/ose-metering-ansible-operator@sha256:07b66cb72cbb2208c20dd20fa0ee2b711ea8519f9171ccaa6ed721ef709026c4_amd64","vendor":{"name":"Red Hat"}}},{"id":"5adb5471-01f0-3123-bf5f-9024d6b5255b","product":{"name":"openshift4/ose-logging-elasticsearch6@sha256:d4a56c38d2481af3f5be1e12499849c6630b80f2210e15df0925828780548a60_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"63825a19-5d8b-3e6c-ad6e-fd5f688d24e8","product":{"name":"openshift4/ose-logging-elasticsearch6@sha256:566d93dc1560cd55dad6122214bcfde9a58cd3fdcb0f07e8a7102b30a3a111f2_amd64","vendor":{"name":"Red Hat"}}},{"id":"789438db-841b-3e2d-af5e-87d3cf33cd67","product":{"name":"openshift4/ose-elasticsearch-operator@sha256:b53a9453c35968050accabadcdd4fc918b3893861a5152a5aa92ed6e79d87b67_amd64","vendor":{"name":"Red Hat"}}},{"id":"7e077908-67f1-35c8-9ede-6f01b4ae85b7","product":{"name":"Red Hat OpenShift Container Platform 4.6","vendor":{"name":"Red Hat"}}},{"id":"7eff584c-9a21-3ed1-9ddb-a781126293f8","product":{"name":"openshift4/ose-logging-fluentd@sha256:a3efef334dffd89a498460e5965f96d2097e36ebdf9f29a9cce66f8f46b528f5_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"83285f11-e3b0-33f1-bb70-3b2a64af4b86","product":{"name":"openshift4/ose-logging-curator5@sha256:69ae721c70713d7b96c8cb7310f027106240f69356c8a7f23db85428d3fd7748_amd64","vendor":{"name":"Red Hat"}}},{"id":"9059d421-0bdc-36c1-9777-2135fc8ba1ee","product":{"name":"openshift4/ose-jenkins-agent-nodejs-10-rhel8@sha256:984875b9b014c265f25e5ea8b7a4266d48a83ecc23c3862dcb3a0caec8f6c43f_s390x","vendor":{"name":"Red Hat"}}},{"id":"927b9b9c-d037-309d-b0f9-d4e441a1e323","product":{"name":"openshift4/ose-logging-kibana6@sha256:a56a03988a016b7b9f4f54cffa91667dff7af9fc436ca49385369dca75aa6f29_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"aad7aa08-6950-3a37-8581-a8d5a4fa9119","product":{"name":"openshift4/ose-jenkins-agent-nodejs-10-rhel8@sha256:829dc83ff6afbdf52f795f0ee46ab8ccfd154ed09760971183a9e87d90b834fe_amd64","vendor":{"name":"Red Hat"}}},{"id":"d544691b-ce45-38dd-a028-fcfef5bc9d05","product":{"name":"openshift4/ose-logging-kibana6@sha256:2ebb7a246cf1e286e187f02db46342749a801bd3daf562aeddf283e36b5776ea_s390x","vendor":{"name":"Red Hat"}}},{"id":"dcffdd15-1593-3b5e-be6d-ca383c05188c","product":{"name":"openshift4/ose-cluster-logging-operator@sha256:9ec64bf850e6ecf3d8b74c1d3bc96e3ef813be52c782b653b4d1de0a3912d97c_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"dd9ea632-a269-3d8a-9e7b-20a0298912bb","product":{"name":"openshift4/ose-cluster-logging-operator@sha256:b79954d4318d225f17b3a39a83a2b23090201849010147bea007ba1187364224_amd64","vendor":{"name":"Red Hat"}}},{"id":"f1b27e54-52d9-398e-b060-813b8eaa4dd2","product":{"name":"openshift4/ose-logging-curator5@sha256:75485d0c331b66fa4996cd2f642e370d241fc93560214a40ce2fd9385b7f3946_s390x","vendor":{"name":"Red Hat"}}}]}},{"id":"eef88cdb-6abb-3500-b865-e720cbca3ad0","advisory":{"id":"RHSA-2021:3917","description":"Red Hat Security Advisory: Red Hat Quay v3.6.0 security, bug fix and enhancement update","summary":"An update is now available for Red Hat Quay 3.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"Oct 19, 2021, 12:09:35 PM","dateUpdated":"Oct 29, 2026, 6:23:53 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2021:3917\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3917.json\n","aliases":"CVE-2017-16137\nCVE-2017-16138\nCVE-2018-1107\nCVE-2018-1109\nCVE-2018-3721\nCVE-2018-3728\nCVE-2018-3774\nCVE-2018-16492\nCVE-2018-21270\nCVE-2019-20920\nCVE-2019-20922\nCVE-2019-1010266\nCVE-2020-7608\nCVE-2020-8203\nCVE-2020-15366\nCVE-2020-26237\nCVE-2020-26291\nCVE-2020-35653\nCVE-2020-35654\nCVE-2021-23364\nCVE-2021-23368\nCVE-2021-23382\nCVE-2021-25289\nCVE-2021-25290\nCVE-2021-25291\nCVE-2021-25292\nCVE-2021-25293\nCVE-2021-27515\nCVE-2021-27516\nCVE-2021-27921\nCVE-2021-27922\nCVE-2021-27923\nCVE-2021-34552\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"05a94e0b-e0fb-351a-b63d-e4921b20adad","product":{"name":"quay/quay-operator-bundle@sha256:7eeea8b3c3f9ddade8e989a5227fe2e01b7dff0546350017117a10155f16fbe1_amd64","vendor":{"name":"Red Hat"}}},{"id":"0f34d31a-0410-36bf-b296-27405b64279e","product":{"name":"quay/quay-rhel8@sha256:d8dd1cd5ccc8231a1228371935700f61f71ffcb9bc3134fe7f37c822a8ec41d3_amd64","vendor":{"name":"Red Hat"}}},{"id":"1a94a414-7886-3377-ae86-dbfeea60c366","product":{"name":"quay/quay-bridge-operator-bundle@sha256:89ff146ee1ca5fd079bfc1d1dc2f84d3215edbeb7b540f7dde390d1508133229_amd64","vendor":{"name":"Red Hat"}}},{"id":"2bf51dc3-dd8f-3535-afb5-4d5a8f20e23f","product":{"name":"quay/quay-container-security-operator-bundle@sha256:bbb7a3a4cfd9c98df1037c58d3e68e1cd8e554c0af336b08a04a914285c68edb_amd64","vendor":{"name":"Red Hat"}}},{"id":"3f5ff6e6-ac90-3c7c-b404-8727cbb7da4e","product":{"name":"quay/quay-builder-rhel8@sha256:0125935ef8a605c55c0a68233177f7ee84b9a0bc3331f496945d72c87aa84cb8_amd64","vendor":{"name":"Red Hat"}}},{"id":"4a867c2c-082f-3f53-9c5d-ef1043d4034f","product":{"name":"quay/quay-operator-rhel8@sha256:0b9639c1895923a625980cd57316065b0e192e5ae6a6a7ca5e7d31289d42f7a0_amd64","vendor":{"name":"Red Hat"}}},{"id":"60957270-43ee-3b5a-94d2-3b7b300e0adc","product":{"name":"quay/quay-container-security-operator-rhel8@sha256:860794203beca60e5961b0e69aae97c7e6d6f7e3867b476d1cc458523ec0804b_amd64","vendor":{"name":"Red Hat"}}},{"id":"7ee65ed6-1af7-38b9-85dd-056f3fd92c3a","product":{"name":"quay/quay-bridge-operator-rhel8@sha256:8ed9531542037756f556ab478b54b216e4ae631d72477dba6784eb75657d3646_amd64","vendor":{"name":"Red Hat"}}},{"id":"b3765dd8-db81-394f-bcce-aadceb427602","product":{"name":"quay/quay-builder-qemu-rhcos-rhel8@sha256:03862af902623b5c0f8ab0ce4bac896624fb0325ff5089e6cc0426f125891e6e_amd64","vendor":{"name":"Red Hat"}}},{"id":"e6fb867a-c58b-337d-a390-52d7c24a0c49","product":{"name":"quay/clair-rhel8@sha256:2cb015d00c209fa894958afccbb5ab03c0cc08d74789412343d40564c790b96d_amd64","vendor":{"name":"Red Hat"}}},{"id":"f3ab269d-fc66-3a2e-9c10-3554429eb98c","product":{"name":"Quay v3","vendor":{"name":"Red Hat"}}}]}}]}