{"id":"EUVD-2026-81608","enisaUuid":"17f05fb4-c9e4-3485-87ff-2b5b03ed18df","description":"vm2 before 3.11.8 does not fully enforce the allowAsync: false option in VM and NodeVM. While localPromise.prototype.then is replaced with a handler that throws \u0027Async not available\u0027, the sandbox\u0027s Promise static methods (Promise.resolve, Promise.all, Promise.race, Promise.any, and Promise.allSettled) still assimilate attacker-supplied thenables: native promise resolution performs PromiseResolveThenableJob and invokes the sandboxed code\u0027s then method in a microtask without passing through the patched then, so the async restriction is never applied. As a result, sandboxed script can schedule work that runs after VM.run() or NodeVM.run() has returned and outside the configured timeout, continuing to execute after the host believes execution is complete.","datePublished":"Sep 17, 2026, 1:46:16 PM","dateUpdated":"Sep 21, 2026, 8:41:28 PM","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/patriksimek/vm2/security/advisories/GHSA-f8gf-w286-fmq2\nhttps://www.vulncheck.com/advisories/vm2-before-3.11.8-allowasync-bypass-via-promise-thenable\n","aliases":"CVE-2026-92959\nGHSA-9538-79j2-h62h\nGHSA-f8gf-w286-fmq2\n","assigner":"VulnCheck","epss":0.45,"enisaIdProduct":[{"id":"a21553ee-a1d8-32ba-915a-5b9bec3fbabd","product":{"name":"vm2","vendor":{"name":"patriksimek"}},"product_version":"0 \u003c3.11.8"}],"enisaIdVendor":[{"id":"4ee47044-a4a9-3f53-8e52-f484616abff2","vendor":{"name":"patriksimek"}}],"enisaIdVulnerability":[{"id":"20a34e89-8a71-36d5-bea0-714ad07be40d","vulnerability":{"id":"GHSA-f8gf-w286-fmq2","description":"vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM","datePublished":"Oct 5, 2026, 10:47:34 PM","dateUpdated":"Oct 5, 2026, 10:47:34 PM","baseScore":0.0,"references":"https://github.com/patriksimek/vm2/security/advisories/GHSA-f8gf-w286-fmq2\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-92959\nhttps://github.com/patriksimek/vm2/commit/1d1aa437a5a39b00b3de0deb3e31f751d4884f5f\nhttps://github.com/patriksimek/vm2\nhttps://github.com/patriksimek/vm2/releases/tag/v3.11.8\nhttps://www.vulncheck.com/advisories/vm2-before-3.11.8-allowasync-bypass-via-promise-thenable\n","enisa_id":"EUVD-2026-81608\n","aliases":"CVE-2026-92959\nGHSA-f8gf-w286-fmq2\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:07:07 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"2c66ad56-1639-3591-9b11-d1897c8a88a4","vulnerability":{"id":"GHSA-9538-79j2-h62h","description":"Duplicate Advisory: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM","datePublished":"Sep 17, 2026, 3:32:16 PM","dateUpdated":"Oct 5, 2026, 10:47:22 PM","baseScore":0.0,"references":"https://github.com/patriksimek/vm2/security/advisories/GHSA-f8gf-w286-fmq2\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-92959\nhttps://www.vulncheck.com/advisories/vm2-before-3.11.8-allowasync-bypass-via-promise-thenable\n","enisa_id":"EUVD-2026-81608\n","aliases":"GHSA-9538-79j2-h62h\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:05:47 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"fd7c2dff-f995-3605-9652-8357ed527161","vulnerability":{"id":"CVE-2026-92959","description":"vm2 before 3.11.8 does not fully enforce the allowAsync: false option in VM and NodeVM. While localPromise.prototype.then is replaced with a handler that throws \u0027Async not available\u0027, the sandbox\u0027s Promise static methods (Promise.resolve, Promise.all, Promise.race, Promise.any, and Promise.allSettled) still assimilate attacker-supplied thenables: native promise resolution performs PromiseResolveThenableJob and invokes the sandboxed code\u0027s then method in a microtask without passing through the patched then, so the async restriction is never applied. As a result, sandboxed script can schedule work that runs after VM.run() or NodeVM.run() has returned and outside the configured timeout, continuing to execute after the host believes execution is complete.","datePublished":"Sep 17, 2026, 1:46:16 PM","dateUpdated":"Sep 21, 2026, 8:41:28 PM","status":"PUBLISHED","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/patriksimek/vm2/security/advisories/GHSA-f8gf-w286-fmq2\nhttps://www.vulncheck.com/advisories/vm2-before-3.11.8-allowasync-bypass-via-promise-thenable\n","enisa_id":"EUVD-2026-81608\n","assigner":"VulnCheck","epss":0.45,"dataProcessed":"Nov 5, 2026, 7:20:35 AM","vulnerabilityProduct":[{"id":"4e0a59f7-03a3-37fa-a1a7-84160396c189","product":{"name":"vm2","vendor":{"name":"patriksimek"}},"product_version":"0 \u003c3.11.8"}],"vulnerabilityVendor":[{"id":"a50ed12b-f9f3-30d9-b189-7d0840612b05","vendor":{"name":"patriksimek"}}]}}],"enisaIdAdvisory":[{"id":"4027c8ec-99fb-3d15-9766-c3063f52054b","advisory":{"id":"WID-SEC-W-2026-3071","description":"vm2: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.","datePublished":"Aug 27, 2026, 10:00:00 PM","dateUpdated":"Oct 5, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3071.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-3071\n","aliases":"CVE-2026-92933\nCVE-2026-92934\nCVE-2026-92953\nCVE-2026-92955\nCVE-2026-92959\nCVE-2026-92936\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"8637d0d4-8f2a-3ba6-9ebe-771f8949da09","product":{"name":"3.11.8","vendor":{"name":"open source"}}},{"id":"c154c1c6-a11a-3f04-ae60-66d5fbf83e25","product":{"name":"vm2","vendor":{"name":"patriksimek"}}}]}},{"id":"91d77c3f-7d27-3acd-bc83-420b73902acb","advisory":{"id":"RHSA-2026:72722","description":"Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update","summary":"Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub.","datePublished":"Sep 28, 2026, 4:31:25 PM","dateUpdated":"Oct 31, 2026, 7:42:28 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:72722\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72722.json\n","aliases":"CVE-2026-19534\nCVE-2026-47683\nCVE-2026-55553\nCVE-2026-56859\nCVE-2026-59869\nCVE-2026-82417\nCVE-2026-84375\nCVE-2026-87776\nCVE-2026-88932\nCVE-2026-89011\nCVE-2026-92000\nCVE-2026-92942\nCVE-2026-92958\nCVE-2026-92959\nCVE-2026-92961\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"b905e446-c112-3df8-affd-7d29f558ca10","product":{"name":"registry.redhat.io/ansible-automation-platform/automation-portal@sha256:ca5c8160a6cb0fa122c3cc91852325af72b9713db1c2683b68e91433b762e604_amd64","vendor":{"name":"Red Hat"}}},{"id":"e6fc78e4-ebeb-30d9-bf4c-dadff2bba3ea","product":{"name":"Red Hat Ansible Automation Platform 2.2","vendor":{"name":"Red Hat"}}}]}},{"id":"9faf3e1f-2538-3f15-9e57-4cf8c2e8b652","advisory":{"id":"RHSA-2026:82151","description":"Red Hat Security Advisory: Ansible automation portal Red Hat Enterprise Linux Images","summary":"Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for the Red Hat Ansible Automation Portal bootable container image.","datePublished":"Oct 13, 2026, 10:07:59 AM","dateUpdated":"Nov 4, 2026, 3:48:30 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:82151\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82151.json\n","aliases":"CVE-2026-13697\nCVE-2026-19534\nCVE-2026-47683\nCVE-2026-47686\nCVE-2026-47698\nCVE-2026-54284\nCVE-2026-55553\nCVE-2026-59893\nCVE-2026-71491\nCVE-2026-75899\nCVE-2026-75931\nCVE-2026-75975\nCVE-2026-76172\nCVE-2026-77037\nCVE-2026-82333\nCVE-2026-82417\nCVE-2026-84292\nCVE-2026-84375\nCVE-2026-84394\nCVE-2026-84961\nCVE-2026-88932\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92942\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92955\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92958\nCVE-2026-92959\nCVE-2026-92960\nCVE-2026-92961\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"2280b8dc-2fd5-30b0-8231-555177763c6b","product":{"name":"registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:8553c734145775879bdfe2befa9f2df1c22c6d7db2f2251401c3cc517a7e0394_amd64","vendor":{"name":"Red Hat"}}},{"id":"e47d596f-4737-3e57-a985-a89840767fcd","product":{"name":"Red Hat Ansible Automation Platform 2.2","vendor":{"name":"Red Hat"}}}]}},{"id":"ad1c6a4c-d052-387f-a77e-0f474d23fafa","advisory":{"id":"RHSA-2026:76788","description":"Red Hat Security Advisory: Red Hat Developer Hub 1.10.5 Plugin Catalog GA plugins release.","summary":"Red Hat Developer Hub 1.10.5 Plugin Catalog GA plugins release.","datePublished":"Oct 6, 2026, 1:09:32 PM","dateUpdated":"Nov 4, 2026, 3:48:29 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:76788\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76788.json\n","aliases":"CVE-2026-13697\nCVE-2026-19534\nCVE-2026-47683\nCVE-2026-47686\nCVE-2026-47698\nCVE-2026-55553\nCVE-2026-75899\nCVE-2026-75931\nCVE-2026-75975\nCVE-2026-76172\nCVE-2026-77037\nCVE-2026-77078\nCVE-2026-77413\nCVE-2026-77414\nCVE-2026-77415\nCVE-2026-82333\nCVE-2026-82417\nCVE-2026-84292\nCVE-2026-84375\nCVE-2026-84394\nCVE-2026-84961\nCVE-2026-87776\nCVE-2026-88932\nCVE-2026-89011\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92942\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92955\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92958\nCVE-2026-92959\nCVE-2026-92960\nCVE-2026-92961\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"180d3269-d15f-343c-82e8-83cb197e3acc","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:5549940696691cc087777c20f5d46b485d31e9fe3db896caa2eca7bfef3edb72_amd64","vendor":{"name":"Red Hat"}}},{"id":"49d020b5-3790-3915-8a55-d6e6d709f5f8","product":{"name":"Red Hat Developer Hub 1.10","vendor":{"name":"Red Hat"}}},{"id":"57ffb8cd-cfbe-3f7e-9c00-85aee590bf45","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:c6a5e6d9c8f3ab900c2b29848273540f4a3e97d351faa338a66da46c0b59d04f_amd64","vendor":{"name":"Red Hat"}}},{"id":"9fc9309a-ed78-376e-9e98-7d17f6b24ec7","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:3aa39a8c3b7bf33aeaae5b3f924d0a2f7625e64657ce9b5517a3a73620f142bb_amd64","vendor":{"name":"Red Hat"}}},{"id":"b7170e41-a20c-34cb-af94-29802c6e7b5f","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:55b8b4e43f9dd474dee53d824591695012994daec86efee4dc08612b12425a46_amd64","vendor":{"name":"Red Hat"}}},{"id":"c0c3bef5-d9ee-3d1c-ae0d-0baec98a55b0","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:924c4e5e8642438f3099272ff7edd746a66fcec4779aeafb9fd6b3ae0c594f72_amd64","vendor":{"name":"Red Hat"}}},{"id":"e4e2cfac-97a6-3481-8285-5dfb16156229","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:df55fd567640bcd54d8e0d19baa97a5e72429865ad342c94bb80c3a49a5c184e_amd64","vendor":{"name":"Red Hat"}}},{"id":"feec8110-5ed4-3c49-8e16-23feb910d9bc","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:0ca07bd2b15a85bfda16cbc0904fb4ee6c8620e18b891ba89ae792cf0a165095_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"b3a5afd5-a512-31af-93cd-7d321d4825e9","advisory":{"id":"RHSA-2026:72712","description":"Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update","summary":"Updated images are now available for Red Hat Ansible Automation Platform 2.1, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub.","datePublished":"Sep 28, 2026, 4:29:02 PM","dateUpdated":"Oct 31, 2026, 9:02:35 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:72712\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72712.json\n","aliases":"CVE-2026-5038\nCVE-2026-19534\nCVE-2026-47683\nCVE-2026-55553\nCVE-2026-59869\nCVE-2026-59879\nCVE-2026-82417\nCVE-2026-84375\nCVE-2026-87776\nCVE-2026-88932\nCVE-2026-89011\nCVE-2026-92000\nCVE-2026-92942\nCVE-2026-92958\nCVE-2026-92959\nCVE-2026-92961\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0da46a7d-739d-3297-b9e5-4a20be45cb39","product":{"name":"Red Hat Ansible Automation Platform 2.1","vendor":{"name":"Red Hat"}}},{"id":"691efc97-f467-32d0-95fa-bc8b3df607c6","product":{"name":"registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"e3fc6d8f-59ab-3635-9404-8467bdd52a34","advisory":{"id":"RHSA-2026:91651","description":"Red Hat Security Advisory: Red Hat Developer Hub 1.9.10 release.","summary":"Red Hat Developer Hub 1.9.10 has been released.","datePublished":"Oct 28, 2026, 11:50:38 AM","dateUpdated":"Nov 4, 2026, 3:54:44 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:91651\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_91651.json\n","aliases":"CVE-2026-47683\nCVE-2026-47686\nCVE-2026-47698\nCVE-2026-84445\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92942\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92955\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92958\nCVE-2026-92959\nCVE-2026-92960\nCVE-2026-92961\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\nCVE-2026-111943\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"21fa6397-f7cf-3dcd-bfac-1b35c37b3cc2","product":{"name":"registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b468b182954d3554b9b8934b65418233502ca24feb0ff66454c5f05e8055e35f_amd64","vendor":{"name":"Red Hat"}}},{"id":"ac6c8622-7e0c-3b6c-8cac-bf787eefa089","product":{"name":"registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:9dffcd643d4a9d3d5cea982ccec08cf50198920d9a08672c7b29994120d3e4fa_amd64","vendor":{"name":"Red Hat"}}},{"id":"d1d295ca-6505-31da-b8b3-5e30e16c3a0a","product":{"name":"registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:bbb5c34eb78780efa7168ae8d53a711a121174c5d7b4ec5f1a9187aba6f9e7ab_amd64","vendor":{"name":"Red Hat"}}},{"id":"f63c7ed2-2550-3b7b-b138-a121fa8b5b4f","product":{"name":"Red Hat Developer Hub 1.9","vendor":{"name":"Red Hat"}}}]}},{"id":"f64f0e8b-273b-30eb-9a5e-42ed89e36088","advisory":{"id":"RHSA-2026:79088","description":"Red Hat Security Advisory: Red Hat Developer Hub 1.10.5 release.","summary":"Red Hat Developer Hub 1.10.5 has been released.","datePublished":"Oct 8, 2026, 7:56:41 AM","dateUpdated":"Nov 4, 2026, 4:01:37 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:79088\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79088.json\n","aliases":"CVE-2026-13697\nCVE-2026-14456\nCVE-2026-18798\nCVE-2026-19534\nCVE-2026-47683\nCVE-2026-47686\nCVE-2026-47698\nCVE-2026-55553\nCVE-2026-63072\nCVE-2026-63076\nCVE-2026-67213\nCVE-2026-67214\nCVE-2026-67422\nCVE-2026-75899\nCVE-2026-75931\nCVE-2026-75975\nCVE-2026-76172\nCVE-2026-77037\nCVE-2026-77078\nCVE-2026-82333\nCVE-2026-82417\nCVE-2026-84292\nCVE-2026-84375\nCVE-2026-84394\nCVE-2026-84445\nCVE-2026-84961\nCVE-2026-87776\nCVE-2026-88932\nCVE-2026-89011\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92942\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92955\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92958\nCVE-2026-92959\nCVE-2026-92960\nCVE-2026-92961\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"06cbcb1e-68b7-35e4-a7c7-453d95844710","product":{"name":"registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:f71a2783106a98ccbfb60f7219f8220cc778da946f0a800c2ce1d66384ed947a_amd64","vendor":{"name":"Red Hat"}}},{"id":"508477c2-1363-394b-bb5d-3facad96d5d0","product":{"name":"registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:2f71e0edb79f26d812edeb1754075159c9c9a0c8250c4d542e83a0725ad60725_amd64","vendor":{"name":"Red Hat"}}},{"id":"5636929f-17b0-3759-a7fe-08ca34a667d5","product":{"name":"registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:38374b57f1896ba7be54a5778ba55aa0e6766443c5421c6481a82f909cfacc51_amd64","vendor":{"name":"Red Hat"}}},{"id":"c2b0f25d-cb2e-34af-9e75-f837cebc386c","product":{"name":"registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:0f02ae0b8405912741a180af1c290feac2003e69d062bec9c7cd5d13f8732dc9_amd64","vendor":{"name":"Red Hat"}}},{"id":"cafb57df-e384-35d1-be1d-0e564954cb14","product":{"name":"registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:a20e789a899fcf4918db20426fce1d3d865391e7dee7c5c50e31533fbdd51fa0_amd64","vendor":{"name":"Red Hat"}}},{"id":"e910d332-380a-3bb6-bece-c3366490900c","product":{"name":"Red Hat Developer Hub 1.10","vendor":{"name":"Red Hat"}}}]}}]}