{"schema":"vulnpedia.research/1","cve":"CVE-2026-77459","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-fmxq-cgp8-87wp","tags":["x_refsource_CONFIRM","WEB","ADVISORY","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-fmxq-cgp8-87wp"},{"source":"nvd","sourceId":"CVE-2026-77459","modified":"2026-10-16T16:00:33.533","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-fmxq-cgp8-87wp"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-fmxq-cgp8-87wp"},{"source":"go","sourceId":"GO-2026-6784","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-fmxq-cgp8-87wp"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-fmxq-cgp8-87wp"},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-fmxq-cgp8-87wp"}]},{"url":"https://github.com/argoproj/argo-cd/commit/1149cdc6e932208c4402183cc3d7b7485239940c","tags":["x_refsource_MISC","WEB","FIX"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","url":"https://github.com/argoproj/argo-cd/commit/1149cdc6e932208c4402183cc3d7b7485239940c"},{"source":"nvd","sourceId":"CVE-2026-77459","modified":"2026-10-16T16:00:33.533","url":"https://github.com/argoproj/argo-cd/commit/1149cdc6e932208c4402183cc3d7b7485239940c"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://github.com/argoproj/argo-cd/commit/1149cdc6e932208c4402183cc3d7b7485239940c"},{"source":"go","sourceId":"GO-2026-6784","url":"https://github.com/argoproj/argo-cd/commit/1149cdc6e932208c4402183cc3d7b7485239940c"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://github.com/argoproj/argo-cd/commit/1149cdc6e932208c4402183cc3d7b7485239940c"}]},{"url":"https://github.com/argoproj/argo-cd/commit/4bc8085b0a6d2296b849539d3d09fc7be7a4a511","tags":["x_refsource_MISC","WEB","FIX"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","url":"https://github.com/argoproj/argo-cd/commit/4bc8085b0a6d2296b849539d3d09fc7be7a4a511"},{"source":"nvd","sourceId":"CVE-2026-77459","modified":"2026-10-16T16:00:33.533","url":"https://github.com/argoproj/argo-cd/commit/4bc8085b0a6d2296b849539d3d09fc7be7a4a511"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://github.com/argoproj/argo-cd/commit/4bc8085b0a6d2296b849539d3d09fc7be7a4a511"},{"source":"go","sourceId":"GO-2026-6784","url":"https://github.com/argoproj/argo-cd/commit/4bc8085b0a6d2296b849539d3d09fc7be7a4a511"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://github.com/argoproj/argo-cd/commit/4bc8085b0a6d2296b849539d3d09fc7be7a4a511"}]},{"url":"https://github.com/argoproj/argo-cd/commit/7f0a05834b05103d69d7c150e1ee36541b314696","tags":["x_refsource_MISC","WEB","FIX"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","url":"https://github.com/argoproj/argo-cd/commit/7f0a05834b05103d69d7c150e1ee36541b314696"},{"source":"nvd","sourceId":"CVE-2026-77459","modified":"2026-10-16T16:00:33.533","url":"https://github.com/argoproj/argo-cd/commit/7f0a05834b05103d69d7c150e1ee36541b314696"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://github.com/argoproj/argo-cd/commit/7f0a05834b05103d69d7c150e1ee36541b314696"},{"source":"go","sourceId":"GO-2026-6784","url":"https://github.com/argoproj/argo-cd/commit/7f0a05834b05103d69d7c150e1ee36541b314696"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://github.com/argoproj/argo-cd/commit/7f0a05834b05103d69d7c150e1ee36541b314696"}]},{"url":"https://github.com/argoproj/argo-cd/commit/d5dd7019ee65be8895133fe4df554e28074242c4","tags":["x_refsource_MISC","WEB","FIX"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","url":"https://github.com/argoproj/argo-cd/commit/d5dd7019ee65be8895133fe4df554e28074242c4"},{"source":"nvd","sourceId":"CVE-2026-77459","modified":"2026-10-16T16:00:33.533","url":"https://github.com/argoproj/argo-cd/commit/d5dd7019ee65be8895133fe4df554e28074242c4"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://github.com/argoproj/argo-cd/commit/d5dd7019ee65be8895133fe4df554e28074242c4"},{"source":"go","sourceId":"GO-2026-6784","url":"https://github.com/argoproj/argo-cd/commit/d5dd7019ee65be8895133fe4df554e28074242c4"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://github.com/argoproj/argo-cd/commit/d5dd7019ee65be8895133fe4df554e28074242c4"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15"},{"source":"nvd","sourceId":"CVE-2026-77459","modified":"2026-10-16T16:00:33.533","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15"},{"source":"go","sourceId":"GO-2026-6784","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10"},{"source":"nvd","sourceId":"CVE-2026-77459","modified":"2026-10-16T16:00:33.533","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10"},{"source":"go","sourceId":"GO-2026-6784","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4"},{"source":"nvd","sourceId":"CVE-2026-77459","modified":"2026-10-16T16:00:33.533","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4"},{"source":"go","sourceId":"GO-2026-6784","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T16:26:47.088Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2"},{"source":"nvd","sourceId":"CVE-2026-77459","modified":"2026-10-16T16:00:33.533","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2"},{"source":"go","sourceId":"GO-2026-6784","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2"}]},{"url":"https://osv.dev/vulnerability/GHSA-fmxq-cgp8-87wp","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","origins":[{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://osv.dev/vulnerability/GHSA-fmxq-cgp8-87wp"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://osv.dev/vulnerability/GHSA-fmxq-cgp8-87wp"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77459","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","origins":[{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77459"},{"source":"go","sourceId":"GO-2026-6784","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77459"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77459"},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77459"}]},{"url":"https://github.com/argoproj/argo-cd","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","origins":[{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://github.com/argoproj/argo-cd"},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://github.com/argoproj/argo-cd"}]},{"url":"https://osv.dev/vulnerability/GO-2026-6784","tags":["ADVISORY"],"source":"go","sourceId":"GO-2026-6784","modified":"2026-10-20T11:25:50.628228133Z","origins":[{"source":"go","sourceId":"GO-2026-6784","url":"https://osv.dev/vulnerability/GO-2026-6784"},{"source":"go","sourceId":"GO-2026-6784","modified":"2026-10-20T11:25:50.628228133Z","url":"https://osv.dev/vulnerability/GO-2026-6784"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-77459","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-77459"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548643","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548643"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-77459","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-77459"}]},{"url":"https://github.com/argoproj/argo-cd/commit/d5dd7019e","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://github.com/argoproj/argo-cd/commit/d5dd7019e"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:77273","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://access.redhat.com/errata/RHSA-2026:77273"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:77269","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://access.redhat.com/errata/RHSA-2026:77269"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:77267","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://access.redhat.com/errata/RHSA-2026:77267"}]},{"source":"euvd","sourceId":"EUVD-2026-98917","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98917","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-98917","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98917"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://osv.dev/vulnerability/GHSA-fmxq-cgp8-87wp","ecosystem":"Go","name":"github.com/argoproj/argo-cd/v2","purl":"pkg:golang/github.com/argoproj/argo-cd/v2","ranges":[{"type":"SEMVER","events":[{"introduced":"2.10.0"},{"last_affected":"2.14.21"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-fmxq-cgp8-87wp/GHSA-fmxq-cgp8-87wp.json"},"modified":"2026-10-20T11:25:50.628228133Z","origins":[{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://osv.dev/vulnerability/GHSA-fmxq-cgp8-87wp"}]},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://osv.dev/vulnerability/GHSA-fmxq-cgp8-87wp","ecosystem":"Go","name":"github.com/argoproj/argo-cd/v3","purl":"pkg:golang/github.com/argoproj/argo-cd/v3","ranges":[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.3.15"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-fmxq-cgp8-87wp/GHSA-fmxq-cgp8-87wp.json"},"modified":"2026-10-20T11:25:50.628228133Z","origins":[{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://osv.dev/vulnerability/GHSA-fmxq-cgp8-87wp"}]},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://osv.dev/vulnerability/GHSA-fmxq-cgp8-87wp","ecosystem":"Go","name":"github.com/argoproj/argo-cd/v3","purl":"pkg:golang/github.com/argoproj/argo-cd/v3","ranges":[{"type":"SEMVER","events":[{"introduced":"3.4.0"},{"fixed":"3.4.10"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-fmxq-cgp8-87wp/GHSA-fmxq-cgp8-87wp.json"},"modified":"2026-10-20T11:25:50.628228133Z","origins":[{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://osv.dev/vulnerability/GHSA-fmxq-cgp8-87wp"}]},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://osv.dev/vulnerability/GHSA-fmxq-cgp8-87wp","ecosystem":"Go","name":"github.com/argoproj/argo-cd/v3","purl":"pkg:golang/github.com/argoproj/argo-cd/v3","ranges":[{"type":"SEMVER","events":[{"introduced":"3.5.0"},{"fixed":"3.5.4"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-fmxq-cgp8-87wp/GHSA-fmxq-cgp8-87wp.json"},"modified":"2026-10-20T11:25:50.628228133Z","origins":[{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://osv.dev/vulnerability/GHSA-fmxq-cgp8-87wp"}]},{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","url":"https://osv.dev/vulnerability/GHSA-fmxq-cgp8-87wp","ecosystem":"Go","name":"github.com/argoproj/argo-cd/v3","purl":"pkg:golang/github.com/argoproj/argo-cd/v3","ranges":[{"type":"SEMVER","events":[{"introduced":"3.6.0-rc1"},{"fixed":"3.6.0-rc2"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-fmxq-cgp8-87wp/GHSA-fmxq-cgp8-87wp.json"},"modified":"2026-10-20T11:25:50.628228133Z","origins":[{"source":"ghsa","sourceId":"GHSA-fmxq-cgp8-87wp","modified":"2026-10-20T11:25:50.628228133Z","url":"https://osv.dev/vulnerability/GHSA-fmxq-cgp8-87wp"}]},{"source":"go","sourceId":"GO-2026-6784","url":"https://osv.dev/vulnerability/GO-2026-6784","ecosystem":"Go","name":"github.com/argoproj/argo-cd","purl":"pkg:golang/github.com/argoproj/argo-cd","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-6784.json"},"modified":"2026-10-20T11:25:50.628228133Z","origins":[{"source":"go","sourceId":"GO-2026-6784","modified":"2026-10-20T11:25:50.628228133Z","url":"https://osv.dev/vulnerability/GO-2026-6784"}]},{"source":"go","sourceId":"GO-2026-6784","url":"https://osv.dev/vulnerability/GO-2026-6784","ecosystem":"Go","name":"github.com/argoproj/argo-cd/v2","purl":"pkg:golang/github.com/argoproj/argo-cd/v2","ranges":[{"type":"SEMVER","events":[{"introduced":"2.10.0"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-6784.json"},"modified":"2026-10-20T11:25:50.628228133Z","origins":[{"source":"go","sourceId":"GO-2026-6784","modified":"2026-10-20T11:25:50.628228133Z","url":"https://osv.dev/vulnerability/GO-2026-6784"}]},{"source":"go","sourceId":"GO-2026-6784","url":"https://osv.dev/vulnerability/GO-2026-6784","ecosystem":"Go","name":"github.com/argoproj/argo-cd/v3","purl":"pkg:golang/github.com/argoproj/argo-cd/v3","ranges":[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.3.15"},{"introduced":"3.4.0"},{"fixed":"3.4.10"},{"introduced":"3.5.0"},{"fixed":"3.5.4"},{"introduced":"3.6.0-rc1"},{"fixed":"3.6.0-rc2"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-6784.json"},"modified":"2026-10-20T11:25:50.628228133Z","origins":[{"source":"go","sourceId":"GO-2026-6784","modified":"2026-10-20T11:25:50.628228133Z","url":"https://osv.dev/vulnerability/GO-2026-6784"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:29b6164d34787ee1b4881d16d6efadbca82cd4909eb8f53126d405fffa4a2bd1_amd64","product":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:29b6164d34787ee1b4881d16d6efadbca82cd4909eb8f53126d405fffa4a2bd1_amd64 as a component of Red Hat OpenShift GitOps 1.20","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:77273"}],"purl":"pkg:oci/argocd-rhel9@sha256%3A29b6164d34787ee1b4881d16d6efadbca82cd4909eb8f53126d405fffa4a2bd1?arch=amd64&repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9&tag=1791184378","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5580f88c8f896f9a94bada7d2053eb4216be0f8b060d08eacdbb0ab49e859a07_arm64","product":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5580f88c8f896f9a94bada7d2053eb4216be0f8b060d08eacdbb0ab49e859a07_arm64 as a component of Red Hat OpenShift GitOps 1.20","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:77273"}],"purl":"pkg:oci/argocd-rhel9@sha256%3A5580f88c8f896f9a94bada7d2053eb4216be0f8b060d08eacdbb0ab49e859a07?arch=arm64&repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9&tag=1791184378","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e2815998b123ef256df13c8256e9a68eb174ad31d12728a3366f73212030f6d_s390x","product":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:5e2815998b123ef256df13c8256e9a68eb174ad31d12728a3366f73212030f6d_s390x as a component of Red Hat OpenShift GitOps 1.20","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:77273"}],"purl":"pkg:oci/argocd-rhel9@sha256%3A5e2815998b123ef256df13c8256e9a68eb174ad31d12728a3366f73212030f6d?arch=s390x&repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9&tag=1791184378","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:7cc9d10b10bcbd007e01cf0473ad12843adff1a47abe36ac32fdac367d4e7a14_ppc64le","product":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:7cc9d10b10bcbd007e01cf0473ad12843adff1a47abe36ac32fdac367d4e7a14_ppc64le as a component of Red Hat OpenShift GitOps 1.20","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:77273"}],"purl":"pkg:oci/argocd-rhel9@sha256%3A7cc9d10b10bcbd007e01cf0473ad12843adff1a47abe36ac32fdac367d4e7a14?arch=ppc64le&repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9&tag=1791184378","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64","product":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64 as a component of Red Hat OpenShift GitOps 1.21","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:77269"}],"purl":"pkg:oci/argocd-rhel9@sha256%3A49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c?arch=amd64&repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9&tag=1791252092","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x","product":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x as a component of Red Hat OpenShift GitOps 1.21","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:77269"}],"purl":"pkg:oci/argocd-rhel9@sha256%3Af32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb?arch=s390x&repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9&tag=1791252092","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le","product":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le as a component of Red Hat OpenShift GitOps 1.21","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:77269"}],"purl":"pkg:oci/argocd-rhel9@sha256%3Af53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231?arch=ppc64le&repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9&tag=1791252092","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64","product":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64 as a component of Red Hat OpenShift GitOps 1.21","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:77269"}],"purl":"pkg:oci/argocd-rhel9@sha256%3Affa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5?arch=arm64&repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9&tag=1791252092","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.22:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:077f0a2f82756ab38c72ebd0140cfb293f8067cebb9427d5cf5c85f683c7fef5_ppc64le","product":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:077f0a2f82756ab38c72ebd0140cfb293f8067cebb9427d5cf5c85f683c7fef5_ppc64le as a component of Red Hat OpenShift GitOps 1.22","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:77267"}],"purl":"pkg:oci/argocd-rhel9@sha256%3A077f0a2f82756ab38c72ebd0140cfb293f8067cebb9427d5cf5c85f683c7fef5?arch=ppc64le&repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9&tag=1791192797","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.22:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0d4be984b53ece8691851713ef4c3101ca072c639ec0aa3b890d7da48291e0ab_s390x","product":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0d4be984b53ece8691851713ef4c3101ca072c639ec0aa3b890d7da48291e0ab_s390x as a component of Red Hat OpenShift GitOps 1.22","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:77267"}],"purl":"pkg:oci/argocd-rhel9@sha256%3A0d4be984b53ece8691851713ef4c3101ca072c639ec0aa3b890d7da48291e0ab?arch=s390x&repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9&tag=1791192797","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.22:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b641491d57a12089873cf5a0339c023ff8ad3abf4547dfa8f815d4839b68626f_arm64","product":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b641491d57a12089873cf5a0339c023ff8ad3abf4547dfa8f815d4839b68626f_arm64 as a component of Red Hat OpenShift GitOps 1.22","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:77267"}],"purl":"pkg:oci/argocd-rhel9@sha256%3Ab641491d57a12089873cf5a0339c023ff8ad3abf4547dfa8f815d4839b68626f?arch=arm64&repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9&tag=1791192797","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.22:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b70caabf383cedf5816ac6fbecbb651dc86f9206838c929b52cc8d24a70593b7_amd64","product":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b70caabf383cedf5816ac6fbecbb651dc86f9206838c929b52cc8d24a70593b7_amd64 as a component of Red Hat OpenShift GitOps 1.22","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:77267"}],"purl":"pkg:oci/argocd-rhel9@sha256%3Ab70caabf383cedf5816ac6fbecbb651dc86f9206838c929b52cc8d24a70593b7?arch=amd64&repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9&tag=1791192797","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:9219504aef129b62971960248aeab972ed8df13073b8437b11ea09f08caecbe1_s390x","product":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:9219504aef129b62971960248aeab972ed8df13073b8437b11ea09f08caecbe1_s390x as a component of Red Hat OpenShift GitOps 1.20","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argo-rollouts-rhel9@sha256%3A9219504aef129b62971960248aeab972ed8df13073b8437b11ea09f08caecbe1?arch=s390x&repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9&tag=1791184750","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d89b4a85b4afe0ea7b759221c32c1ff0867ce7f61cf0e2ef0e05cbdc8809aad7_ppc64le","product":"registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:d89b4a85b4afe0ea7b759221c32c1ff0867ce7f61cf0e2ef0e05cbdc8809aad7_ppc64le as a component of Red Hat OpenShift GitOps 1.20","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argocd-agent-rhel9@sha256%3Ad89b4a85b4afe0ea7b759221c32c1ff0867ce7f61cf0e2ef0e05cbdc8809aad7?arch=ppc64le&repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9&tag=1791183980","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:d7751e168acc34788363659361bc257b0fe34cc33ebc691278747a899f6f2985_arm64","product":"registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:d7751e168acc34788363659361bc257b0fe34cc33ebc691278747a899f6f2985_arm64 as a component of Red Hat OpenShift GitOps 1.20","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argocd-image-updater-rhel9@sha256%3Ad7751e168acc34788363659361bc257b0fe34cc33ebc691278747a899f6f2985?arch=arm64&repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9&tag=1791183886","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:18473fe92565afb2c13427a1119e3333f885e12188bb13ae7ca52e922033b6f6_arm64","product":"registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:18473fe92565afb2c13427a1119e3333f885e12188bb13ae7ca52e922033b6f6_arm64 as a component of Red Hat OpenShift GitOps 1.20","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/dex-rhel9@sha256%3A18473fe92565afb2c13427a1119e3333f885e12188bb13ae7ca52e922033b6f6?arch=arm64&repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9&tag=1791183962","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:deaa56809e12d2857b5b85e59033217a88bff9db4b567263781d9c371188d094_ppc64le","product":"registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:deaa56809e12d2857b5b85e59033217a88bff9db4b567263781d9c371188d094_ppc64le as a component of Red Hat OpenShift GitOps 1.20","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/gitops-rhel9-operator@sha256%3Adeaa56809e12d2857b5b85e59033217a88bff9db4b567263781d9c371188d094?arch=ppc64le&repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator&tag=1791183854","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.20:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4929d21e9a682ecef763297f7e1263157000a38f79b1939a641c9e80948247e6_ppc64le","product":"registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4929d21e9a682ecef763297f7e1263157000a38f79b1939a641c9e80948247e6_ppc64le as a component of Red Hat OpenShift GitOps 1.20","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/must-gather-rhel9@sha256%3A4929d21e9a682ecef763297f7e1263157000a38f79b1939a641c9e80948247e6?arch=ppc64le&repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9&tag=1791183724","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le","product":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le as a component of Red Hat OpenShift GitOps 1.21","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argo-rollouts-rhel9@sha256%3Ade9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd?arch=ppc64le&repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9&tag=1791251919","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64","product":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64 as a component of Red Hat OpenShift GitOps 1.21","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argocd-extensions-rhel9@sha256%3A6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f?arch=arm64&repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9&tag=1791260868","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64","product":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64 as a component of Red Hat OpenShift GitOps 1.21","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/console-plugin-rhel9@sha256%3A1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec?arch=arm64&repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9&tag=1791252544","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64","product":"registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64 as a component of Red Hat OpenShift GitOps 1.21","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/dex-rhel9@sha256%3Acf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6?arch=arm64&repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9&tag=1791253159","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64","product":"registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64 as a component of Red Hat OpenShift GitOps 1.21","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/gitops-rhel9@sha256%3A8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14?arch=arm64&repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9&tag=1791252015","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.22:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:373acc13d0973ccd162df093b997651d756268cdc5403afd3dd1956646ff1330_amd64","product":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:373acc13d0973ccd162df093b997651d756268cdc5403afd3dd1956646ff1330_amd64 as a component of Red Hat OpenShift GitOps 1.22","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argo-rollouts-rhel9@sha256%3A373acc13d0973ccd162df093b997651d756268cdc5403afd3dd1956646ff1330?arch=amd64&repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9&tag=1791192808","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.22:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:50f202ab12bd2d85e36a06c93f97a39056208ec721a75e47118ad93b8e0638d0_amd64","product":"registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:50f202ab12bd2d85e36a06c93f97a39056208ec721a75e47118ad93b8e0638d0_amd64 as a component of Red Hat OpenShift GitOps 1.22","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argocd-agent-rhel9@sha256%3A50f202ab12bd2d85e36a06c93f97a39056208ec721a75e47118ad93b8e0638d0?arch=amd64&repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9&tag=1791193074","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.22:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:cb9d9154e0573fcd6344123c5f61a66adce4a15f5a1a74f51464a06edb985f3b_s390x","product":"registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:cb9d9154e0573fcd6344123c5f61a66adce4a15f5a1a74f51464a06edb985f3b_s390x as a component of Red Hat OpenShift GitOps 1.22","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argocd-image-updater-rhel9@sha256%3Acb9d9154e0573fcd6344123c5f61a66adce4a15f5a1a74f51464a06edb985f3b?arch=s390x&repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9&tag=1791193727","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.22:registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:0bd6eac45f81bd48a9ff92348466fce53b3c1b1fc2d7dd1bc7f986edbbb75d63_amd64","product":"registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:0bd6eac45f81bd48a9ff92348466fce53b3c1b1fc2d7dd1bc7f986edbbb75d63_amd64 as a component of Red Hat OpenShift GitOps 1.22","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/console-plugin-4-18-rhel9@sha256%3A0bd6eac45f81bd48a9ff92348466fce53b3c1b1fc2d7dd1bc7f986edbbb75d63?arch=amd64&repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9&tag=1791192530","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.22:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:8f796be0e1c86ca15e52dcb4db95833ee0cf7ea217dc9436cfe1096c4d0d5657_ppc64le","product":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:8f796be0e1c86ca15e52dcb4db95833ee0cf7ea217dc9436cfe1096c4d0d5657_ppc64le as a component of Red Hat OpenShift GitOps 1.22","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/console-plugin-rhel9@sha256%3A8f796be0e1c86ca15e52dcb4db95833ee0cf7ea217dc9436cfe1096c4d0d5657?arch=ppc64le&repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9&tag=1791192905","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.22:registry.redhat.io/openshift-gitops-1/gitops-promoter-rhel9@sha256:4cec07765db3f48acc4ec055148f605d1f9fbbcc340b437ff125cf1fab0fb4a5_amd64","product":"registry.redhat.io/openshift-gitops-1/gitops-promoter-rhel9@sha256:4cec07765db3f48acc4ec055148f605d1f9fbbcc340b437ff125cf1fab0fb4a5_amd64 as a component of Red Hat OpenShift GitOps 1.22","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/gitops-promoter-rhel9@sha256%3A4cec07765db3f48acc4ec055148f605d1f9fbbcc340b437ff125cf1fab0fb4a5?arch=amd64&repository_url=registry.redhat.io/openshift-gitops-1/gitops-promoter-rhel9&tag=1791193470","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.22:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:949d32f9d8fbf3476a02c5d7c21350ae47f2b4eff4e7014945ab43321ea04469_ppc64le","product":"registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:949d32f9d8fbf3476a02c5d7c21350ae47f2b4eff4e7014945ab43321ea04469_ppc64le as a component of Red Hat OpenShift GitOps 1.22","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/gitops-rhel9-operator@sha256%3A949d32f9d8fbf3476a02c5d7c21350ae47f2b4eff4e7014945ab43321ea04469?arch=ppc64le&repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator&tag=1791193358","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"Red Hat OpenShift GitOps 1.22:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:74f4a91c358944f90519477fa9b041de610389f8de4846b2fe32eeec9f3fa9ab_s390x","product":"registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:74f4a91c358944f90519477fa9b041de610389f8de4846b2fe32eeec9f3fa9ab_s390x as a component of Red Hat OpenShift GitOps 1.22","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/must-gather-rhel9@sha256%3A74f4a91c358944f90519477fa9b041de610389f8de4846b2fe32eeec9f3fa9ab?arch=s390x&repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9&tag=1791192360","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]},{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/gitops-rhel9-operator","product":"openshift-gitops-1/gitops-rhel9-operator as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/gitops-rhel9-operator?repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-77459","modified":"2026-10-20T23:07:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77459.json"}]}],"vendorCoverage":{"total":140,"shown":32,"omitted":108,"source":"redhat"}}