{}

{}

{}

{"bugzilla": {"description": "olm-operator-konflux-sample: olm-operator-konflux-sample: bundle-hack/update_bundle.sh lacks fail-fast shell options", "id": "2530058", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2530058"}, "csaw": false, "cvss3": {"cvss3_base_score": "2.6", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N", "status": "draft"}, "cwe": "CWE-252", "details": ["A flaw was found in olm-operator-konflux-sample. The `bundle-hack/update_bundle.sh` script lacks mechanisms to stop execution immediately upon encountering an error. This oversight allows critical data processing steps, such as those involving `skopeo` or `jq` commands, to fail silently and proceed with outdated or incomplete information. Consequently, this could lead to data integrity issues within the system."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-87061", "public_date": "2026-09-08T19:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-87061\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-87061"], "statement": "Low impact: The `bundle-hack/update_bundle.sh` script within `olm-operator-konflux-sample` lacks fail-fast shell options, which could lead to silent failures during `skopeo`/`jq` operations. This may result in the use of stale or incomplete data during bundle updates, primarily affecting the integrity of Konflux CI/CD processes rather than directly impacting the runtime security of deployed applications.", "threat_severity": "Low"}

{}