{"id":"EUVD-2026-81597","enisaUuid":"5a6f7957-aa25-3da5-98d7-baf4f8a98fad","description":"vm2 versions \u003e\u003d 3.9.6 and \u003c\u003d 3.11.6 are affected by a NodeVM builtin allowlist bypass that permits a sandbox escape on Node.js 24 and newer when the embedder explicitly allows the node:test builtin (e.g. require: { builtin: [\u0027node:test\u0027] }). On Node.js 24+, module.builtinModules exposes the scheme-only key node:test, which is not covered by vm2\u0027s family-based DANGEROUS_BUILTINS protection, so it is stored in the generic host-passthrough loader. Because requireImpl() in lib/setup-node-sandbox.js strips a single \u0027node:\u0027 prefix before the builtin lookup, sandbox code calling require(\u0027node:node:test\u0027) resolves to the stored node:test key and receives a readonly proxy to the host module. Calls to node:test.run() are forwarded to the host implementation, which spawns a separate Node process for process-isolated test execution and passes through attacker-controlled execArgv values; supplying --eval\u003d\u003cJavaScript\u003e therefore executes arbitrary JavaScript in an unrestricted host Node process outside the NodeVM sandbox. Fixed in vm2 3.11.7.","datePublished":"Sep 17, 2026, 1:46:08 PM","dateUpdated":"Sep 18, 2026, 7:31:54 PM","baseScore":9.4,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":"https://github.com/patriksimek/vm2/security/advisories/GHSA-qhwx-74w5-xhxq\nhttps://www.vulncheck.com/advisories/vm2-3.9.6-through-3.11.5-sandbox-escape-via-node-test\n","aliases":"CVE-2026-92948\nGHSA-wqg3-r97q-73xm\nGHSA-qhwx-74w5-xhxq\n","assigner":"VulnCheck","epss":0.65,"enisaIdProduct":[{"id":"7dea023d-ca0f-327d-a529-c733c4a163c5","product":{"name":"vm2","vendor":{"name":"patriksimek"}},"product_version":"3.9.6 \u003c3.11.7"}],"enisaIdVendor":[{"id":"d5703e8f-acac-311d-ba60-55b9956f99b5","vendor":{"name":"patriksimek"}}],"enisaIdVulnerability":[{"id":"143f4d17-80ed-3f67-8f2a-f592f84f62c5","vulnerability":{"id":"CVE-2026-92948","description":"vm2 versions \u003e\u003d 3.9.6 and \u003c\u003d 3.11.6 are affected by a NodeVM builtin allowlist bypass that permits a sandbox escape on Node.js 24 and newer when the embedder explicitly allows the node:test builtin (e.g. require: { builtin: [\u0027node:test\u0027] }). On Node.js 24+, module.builtinModules exposes the scheme-only key node:test, which is not covered by vm2\u0027s family-based DANGEROUS_BUILTINS protection, so it is stored in the generic host-passthrough loader. Because requireImpl() in lib/setup-node-sandbox.js strips a single \u0027node:\u0027 prefix before the builtin lookup, sandbox code calling require(\u0027node:node:test\u0027) resolves to the stored node:test key and receives a readonly proxy to the host module. Calls to node:test.run() are forwarded to the host implementation, which spawns a separate Node process for process-isolated test execution and passes through attacker-controlled execArgv values; supplying --eval\u003d\u003cJavaScript\u003e therefore executes arbitrary JavaScript in an unrestricted host Node process outside the NodeVM sandbox. Fixed in vm2 3.11.7.","datePublished":"Sep 17, 2026, 1:46:08 PM","dateUpdated":"Sep 18, 2026, 7:31:54 PM","status":"PUBLISHED","baseScore":9.4,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":"https://github.com/patriksimek/vm2/security/advisories/GHSA-qhwx-74w5-xhxq\nhttps://www.vulncheck.com/advisories/vm2-3.9.6-through-3.11.5-sandbox-escape-via-node-test\n","enisa_id":"EUVD-2026-81597\n","assigner":"VulnCheck","epss":0.65,"dataProcessed":"Nov 11, 2026, 7:25:41 AM","vulnerabilityProduct":[{"id":"e53773c2-c93e-3fa4-ba55-bfbb21056cb9","product":{"name":"vm2","vendor":{"name":"patriksimek"}},"product_version":"3.9.6 \u003c3.11.7"}],"vulnerabilityVendor":[{"id":"e53018ea-f90b-325c-8948-83e9573dffd7","vendor":{"name":"patriksimek"}}]}},{"id":"15b2e669-973d-3aeb-b460-a546986c6356","vulnerability":{"id":"GHSA-wqg3-r97q-73xm","description":"Duplicate Advisory: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape","datePublished":"Sep 17, 2026, 3:32:15 PM","dateUpdated":"Oct 1, 2026, 3:41:04 PM","baseScore":0.0,"references":"https://github.com/patriksimek/vm2/security/advisories/GHSA-qhwx-74w5-xhxq\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-92948\nhttps://www.vulncheck.com/advisories/vm2-3.9.6-through-3.11.5-sandbox-escape-via-node-test\n","enisa_id":"EUVD-2026-81597\n","aliases":"GHSA-wqg3-r97q-73xm\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:53:48 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"a3497a59-74b8-328e-aee5-eba9eda88bea","vulnerability":{"id":"GHSA-qhwx-74w5-xhxq","description":"vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape","datePublished":"Oct 1, 2026, 3:41:31 PM","dateUpdated":"Oct 1, 2026, 3:41:31 PM","baseScore":0.0,"references":"https://github.com/patriksimek/vm2/security/advisories/GHSA-qhwx-74w5-xhxq\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-92948\nhttps://github.com/patriksimek/vm2/commit/415339f698f0d52d3c5ad358b12b79c8072d5b4b\nhttps://github.com/patriksimek/vm2\nhttps://github.com/patriksimek/vm2/releases/tag/v3.11.7\nhttps://www.vulncheck.com/advisories/vm2-3.9.6-through-3.11.5-sandbox-escape-via-node-test\n","enisa_id":"EUVD-2026-81597\n","aliases":"GHSA-qhwx-74w5-xhxq\nCVE-2026-92948\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:54:29 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"5c990039-bf57-3763-956f-58652a6ea933","advisory":{"id":"RHSA-2026:80644","description":"Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update","summary":"Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub.","datePublished":"Oct 12, 2026, 8:11:19 AM","dateUpdated":"Nov 7, 2026, 5:57:42 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:80644\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80644.json\n","aliases":"CVE-2026-47686\nCVE-2026-47698\nCVE-2026-84961\nCVE-2026-85152\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92960\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\nCVE-2026-101916\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"72ca4aa8-50b6-3673-8001-4b7805b5a019","product":{"name":"Red Hat Ansible Automation Platform 2.2","vendor":{"name":"Red Hat"}}},{"id":"8d3bba85-f3ae-3273-847b-179b70760554","product":{"name":"registry.redhat.io/ansible-automation-platform/automation-portal@sha256:cd22d7068dc9cdc475f4cb097b9019f54d5adf51927a3773c483040224018e96_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"7d56233a-1108-3247-a59e-c3b1ce613806","advisory":{"id":"RHSA-2026:82151","description":"Red Hat Security Advisory: Ansible automation portal Red Hat Enterprise Linux Images","summary":"Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for the Red Hat Ansible Automation Portal bootable container image.","datePublished":"Oct 13, 2026, 10:07:59 AM","dateUpdated":"Nov 10, 2026, 2:11:32 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:82151\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82151.json\n","aliases":"CVE-2026-13697\nCVE-2026-19534\nCVE-2026-47683\nCVE-2026-47686\nCVE-2026-47698\nCVE-2026-54284\nCVE-2026-55553\nCVE-2026-59893\nCVE-2026-71491\nCVE-2026-75899\nCVE-2026-75931\nCVE-2026-75975\nCVE-2026-76172\nCVE-2026-77037\nCVE-2026-82333\nCVE-2026-82417\nCVE-2026-84292\nCVE-2026-84375\nCVE-2026-84394\nCVE-2026-84961\nCVE-2026-88932\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92942\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92955\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92958\nCVE-2026-92959\nCVE-2026-92960\nCVE-2026-92961\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"2280b8dc-2fd5-30b0-8231-555177763c6b","product":{"name":"registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:8553c734145775879bdfe2befa9f2df1c22c6d7db2f2251401c3cc517a7e0394_amd64","vendor":{"name":"Red Hat"}}},{"id":"e47d596f-4737-3e57-a985-a89840767fcd","product":{"name":"Red Hat Ansible Automation Platform 2.2","vendor":{"name":"Red Hat"}}}]}},{"id":"9df5536d-dcdb-3116-9d1f-d0b791c48633","advisory":{"id":"RHSA-2026:79088","description":"Red Hat Security Advisory: Red Hat Developer Hub 1.10.5 release.","summary":"Red Hat Developer Hub 1.10.5 has been released.","datePublished":"Oct 8, 2026, 7:56:41 AM","dateUpdated":"Nov 7, 2026, 2:47:06 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:79088\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79088.json\n","aliases":"CVE-2026-13697\nCVE-2026-14456\nCVE-2026-18798\nCVE-2026-19534\nCVE-2026-47683\nCVE-2026-47686\nCVE-2026-47698\nCVE-2026-55553\nCVE-2026-63072\nCVE-2026-63076\nCVE-2026-67213\nCVE-2026-67214\nCVE-2026-67422\nCVE-2026-75899\nCVE-2026-75931\nCVE-2026-75975\nCVE-2026-76172\nCVE-2026-77037\nCVE-2026-77078\nCVE-2026-82333\nCVE-2026-82417\nCVE-2026-84292\nCVE-2026-84375\nCVE-2026-84394\nCVE-2026-84445\nCVE-2026-84961\nCVE-2026-87776\nCVE-2026-88932\nCVE-2026-89011\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92942\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92955\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92958\nCVE-2026-92959\nCVE-2026-92960\nCVE-2026-92961\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"06cbcb1e-68b7-35e4-a7c7-453d95844710","product":{"name":"registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:f71a2783106a98ccbfb60f7219f8220cc778da946f0a800c2ce1d66384ed947a_amd64","vendor":{"name":"Red Hat"}}},{"id":"508477c2-1363-394b-bb5d-3facad96d5d0","product":{"name":"registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:2f71e0edb79f26d812edeb1754075159c9c9a0c8250c4d542e83a0725ad60725_amd64","vendor":{"name":"Red Hat"}}},{"id":"5636929f-17b0-3759-a7fe-08ca34a667d5","product":{"name":"registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:38374b57f1896ba7be54a5778ba55aa0e6766443c5421c6481a82f909cfacc51_amd64","vendor":{"name":"Red Hat"}}},{"id":"c2b0f25d-cb2e-34af-9e75-f837cebc386c","product":{"name":"registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:0f02ae0b8405912741a180af1c290feac2003e69d062bec9c7cd5d13f8732dc9_amd64","vendor":{"name":"Red Hat"}}},{"id":"cafb57df-e384-35d1-be1d-0e564954cb14","product":{"name":"registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:a20e789a899fcf4918db20426fce1d3d865391e7dee7c5c50e31533fbdd51fa0_amd64","vendor":{"name":"Red Hat"}}},{"id":"e910d332-380a-3bb6-bece-c3366490900c","product":{"name":"Red Hat Developer Hub 1.10","vendor":{"name":"Red Hat"}}}]}},{"id":"af6de71e-6084-3d2b-b265-885a3b32489b","advisory":{"id":"RHSA-2026:76788","description":"Red Hat Security Advisory: Red Hat Developer Hub 1.10.5 Plugin Catalog GA plugins release.","summary":"Red Hat Developer Hub 1.10.5 Plugin Catalog GA plugins release.","datePublished":"Oct 6, 2026, 1:09:32 PM","dateUpdated":"Nov 7, 2026, 11:43:31 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:76788\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76788.json\n","aliases":"CVE-2026-13697\nCVE-2026-19534\nCVE-2026-47683\nCVE-2026-47686\nCVE-2026-47698\nCVE-2026-55553\nCVE-2026-75899\nCVE-2026-75931\nCVE-2026-75975\nCVE-2026-76172\nCVE-2026-77037\nCVE-2026-77078\nCVE-2026-77413\nCVE-2026-77414\nCVE-2026-77415\nCVE-2026-82333\nCVE-2026-82417\nCVE-2026-84292\nCVE-2026-84375\nCVE-2026-84394\nCVE-2026-84961\nCVE-2026-87776\nCVE-2026-88932\nCVE-2026-89011\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92942\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92955\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92958\nCVE-2026-92959\nCVE-2026-92960\nCVE-2026-92961\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"180d3269-d15f-343c-82e8-83cb197e3acc","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:5549940696691cc087777c20f5d46b485d31e9fe3db896caa2eca7bfef3edb72_amd64","vendor":{"name":"Red Hat"}}},{"id":"49d020b5-3790-3915-8a55-d6e6d709f5f8","product":{"name":"Red Hat Developer Hub 1.10","vendor":{"name":"Red Hat"}}},{"id":"57ffb8cd-cfbe-3f7e-9c00-85aee590bf45","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:c6a5e6d9c8f3ab900c2b29848273540f4a3e97d351faa338a66da46c0b59d04f_amd64","vendor":{"name":"Red Hat"}}},{"id":"9fc9309a-ed78-376e-9e98-7d17f6b24ec7","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:3aa39a8c3b7bf33aeaae5b3f924d0a2f7625e64657ce9b5517a3a73620f142bb_amd64","vendor":{"name":"Red Hat"}}},{"id":"b7170e41-a20c-34cb-af94-29802c6e7b5f","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:55b8b4e43f9dd474dee53d824591695012994daec86efee4dc08612b12425a46_amd64","vendor":{"name":"Red Hat"}}},{"id":"c0c3bef5-d9ee-3d1c-ae0d-0baec98a55b0","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:924c4e5e8642438f3099272ff7edd746a66fcec4779aeafb9fd6b3ae0c594f72_amd64","vendor":{"name":"Red Hat"}}},{"id":"e4e2cfac-97a6-3481-8285-5dfb16156229","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:df55fd567640bcd54d8e0d19baa97a5e72429865ad342c94bb80c3a49a5c184e_amd64","vendor":{"name":"Red Hat"}}},{"id":"feec8110-5ed4-3c49-8e16-23feb910d9bc","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:0ca07bd2b15a85bfda16cbc0904fb4ee6c8620e18b891ba89ae792cf0a165095_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"b08ac195-3863-3ac2-9be8-2c746b5eead9","advisory":{"id":"RHSA-2026:80603","description":"Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update","summary":"Updated images are now available for Red Hat Ansible Automation Platform 2.1, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub.","datePublished":"Oct 12, 2026, 5:44:41 AM","dateUpdated":"Nov 7, 2026, 5:57:42 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:80603\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80603.json\n","aliases":"CVE-2026-47686\nCVE-2026-47698\nCVE-2026-84961\nCVE-2026-85152\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92960\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\nCVE-2026-101916\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"345f9be6-2f62-3563-b654-79433799673a","product":{"name":"Red Hat Ansible Automation Platform 2.1","vendor":{"name":"Red Hat"}}},{"id":"d435b4ca-d802-3415-ba8a-e311b1155a03","product":{"name":"registry.redhat.io/ansible-automation-platform/automation-portal@sha256:f92d478c1fad9df93d573b3a4d4cc5904f57f33d65a308472265c8bfeb057f59_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"d8073b39-b7db-3892-b3ab-fb3f315ca45c","advisory":{"id":"RHSA-2026:91651","description":"Red Hat Security Advisory: Red Hat Developer Hub 1.9.10 release.","summary":"Red Hat Developer Hub 1.9.10 has been released.","datePublished":"Oct 28, 2026, 11:50:38 AM","dateUpdated":"Nov 11, 2026, 3:37:19 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:91651\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_91651.json\n","aliases":"CVE-2026-47683\nCVE-2026-47686\nCVE-2026-47698\nCVE-2026-84445\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92942\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92955\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92958\nCVE-2026-92959\nCVE-2026-92960\nCVE-2026-92961\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\nCVE-2026-111943\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"21fa6397-f7cf-3dcd-bfac-1b35c37b3cc2","product":{"name":"registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b468b182954d3554b9b8934b65418233502ca24feb0ff66454c5f05e8055e35f_amd64","vendor":{"name":"Red Hat"}}},{"id":"ac6c8622-7e0c-3b6c-8cac-bf787eefa089","product":{"name":"registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:9dffcd643d4a9d3d5cea982ccec08cf50198920d9a08672c7b29994120d3e4fa_amd64","vendor":{"name":"Red Hat"}}},{"id":"d1d295ca-6505-31da-b8b3-5e30e16c3a0a","product":{"name":"registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:bbb5c34eb78780efa7168ae8d53a711a121174c5d7b4ec5f1a9187aba6f9e7ab_amd64","vendor":{"name":"Red Hat"}}},{"id":"f63c7ed2-2550-3b7b-b138-a121fa8b5b4f","product":{"name":"Red Hat Developer Hub 1.9","vendor":{"name":"Red Hat"}}}]}}]}