Vulnerability-Lookup

RHSA-2026:62260

Vulnerability from csaf_redhat - Published: 2026-09-01 18:22 - Updated: 2026-10-02 10:33

Summary

Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.30.0 Release.

Severity

Important

Notes

Topic: Red Hat OpenShift Dev Spaces 3.30.0 has been released.

Details: Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.30 release is based on Eclipse Che 7.121 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2. Users still using the v1 standard should migrate as soon as possible. https://devfile.io/docs/2.2.0/migrating-to-devfile-v2 Dev Spaces supports OpenShift EUS releases v4.16 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates. https://access.redhat.com/support/policy/updates/openshift#crw

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-55163

A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64	—	Vendor Fix fix Workaround

Known not affected 61 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64	—	Workaround

Threats

Impact Important

CVE-2026-8286

A flaw was found in curl. When a new data transfer attempts to upgrade its connection using STARTTLS, it may incorrectly reuse an existing live connection. This reuse can occur even if the Transport Layer Security (TLS) configuration of the new transfer does not match the existing connection, potentially leading to an insecure connection being established.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64	—	Vendor Fix fix Workaround

Known not affected 61 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64	—	Workaround

Threats

Impact Important

CVE-2026-9277

A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-8286

Known not affected 61 products, the same list as for CVE-2026-8286

Threats

Impact Important

CVE-2026-9547

A flaw was found in curl. When a libcurl-based application uses SCP:// or SFTP:// for transfers and employs the CURLOPT_SSH_KEYFUNCTION callback, it may silently accept an untrusted server. This occurs if the server's host key type differs from the one stored in the known_hosts file. The callback mechanism fails to enforce the host key restriction, enabling a connection to an untrusted server and risking a man-in-the-middle attack.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 4 products, the same list as for CVE-2026-8286

Known not affected 61 products, the same list as for CVE-2026-8286

Threats

Impact Important

CVE-2026-9563

A flaw was found in Eclipse Parsson. The JSON parser did not enforce a default maximum on the number of characters consumed while processing a single JSON document. A remote attacker could exploit this by providing a very large, specially crafted JSON document. This could force applications to consume excessive CPU and memory, leading to a denial of service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le	—	Vendor Fix fix

Known not affected 57 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64		—

Threats

Impact Important

CVE-2026-10050

A flaw was found in Eclipse Jetty, a widely used web server and servlet container. This vulnerability affects its HTTP Digest authentication mechanism, which is used to verify user identities. The issue arises because Jetty's hash computation for passwords does not correctly handle certain characters, leading to a weakness in how passwords are processed. A remote attacker could exploit this by crafting a specific password that generates the same internal hash as a legitimate user's password, thereby bypassing authentication and gaining unauthorized access to the victim's account.

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-303 - Incorrect Implementation of Authentication Algorithm

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-10051

A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously retained trailers, or a combination of previous and current request trailers.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-201 - Insertion of Sensitive Information Into Sent Data

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Moderate

CVE-2026-12143

A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-8286

Known not affected 61 products, the same list as for CVE-2026-8286

Threats

Impact Important

CVE-2026-12151

A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le	—	Vendor Fix fix Workaround

Known not affected 53 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64	—	Workaround

Threats

Impact Important

CVE-2026-13149

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le	—	Vendor Fix fix Workaround

Known not affected 53 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64	—	Workaround

Threats

Impact Important

CVE-2026-15075

A flaw was found in Eclipse Vert.x. The `DefaultRedirectHandler` in `vertx-core` improperly handles HTTP 30x redirects by propagating all request headers, including sensitive authentication and session credentials, to cross-origin redirect destinations. An attacker can exploit this by redirecting a Vert.x HttpClient request to a malicious host. This allows the attacker to capture sensitive information such as bearer tokens, basic authentication credentials, session cookies, and API keys, leading to unauthorized access or further attacks.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64	—	Vendor Fix fix Workaround

Known not affected 57 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64	—	Workaround

Threats

Impact Important

CVE-2026-15076

A flaw was found in Eclipse Vert.x Web Client. The WebClientSession component does not properly validate the Domain attribute of a Set-Cookie response header against the originating server's domain. This vulnerability allows a remote attacker to inject a cookie scoped to an arbitrary third-party domain. When the victim application subsequently sends a request to the targeted domain, the injected cookie is presented, potentially leading to information disclosure and unauthorized access to sensitive data through the attacker's account on that service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64	—	Vendor Fix fix Workaround

Known not affected 61 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64	—	Workaround

Threats

Impact Important

CVE-2026-27136

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64	—	Vendor Fix fix Workaround

Known not affected 61 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64	—	Workaround

Threats

Impact Important

CVE-2026-34986

A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-131 - Incorrect Calculation of Buffer Size

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64	—	Vendor Fix fix Workaround

Known not affected 53 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-39820

A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64	—	Vendor Fix fix Workaround

Known not affected 57 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64	—	Workaround

Threats

Impact Important

CVE-2026-39831

A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 4 products, the same list as for CVE-2026-27136

Known not affected 61 products, the same list as for CVE-2026-27136

Threats

Impact Important

CVE-2026-39835

A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 4 products, the same list as for CVE-2026-27136

Known not affected 61 products, the same list as for CVE-2026-27136

Threats

Impact Important

CVE-2026-40898

A flaw was found in quic-go, an implementation of the QUIC protocol in Go. A remote attacker can exploit this by sending specially crafted HTTP/3 trailer fields. This can cause the system to allocate excessive memory, leading to a denial-of-service (DoS) condition where the affected server or client may crash or run out of resources.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-27136

Known not affected 61 products, the same list as for CVE-2026-27136

Threats

Impact Important

CVE-2026-40983

A flaw was found in Micrometer. A remote attacker can provide specially crafted gRPC (gRPC Remote Procedure Call) requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-40984

A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-41242

A flaw was found in protobufjs, a JavaScript (JS) library used for compiling protobuf definitions. A remote attacker with low privileges can exploit this vulnerability by injecting arbitrary code into the "type" fields of protobuf definitions. This malicious code will then execute during the object decoding process, leading to arbitrary code execution and potentially full system compromise.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-8286

Known not affected 61 products, the same list as for CVE-2026-8286

Threats

Impact Important

CVE-2026-41695

A flaw was found in Spring Data Commons. A remote attacker can exploit this vulnerability by providing specially crafted property path strings to the MappingContext property path resolution. This can lead to resource exhaustion, resulting in a denial of service (DoS) for affected applications.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-41716

A flaw was found in Spring Data Commons. An attacker can exploit this vulnerability by sending repeated requests with specially crafted strings, which are then permanently retained in the internal property-lookup cache. This can lead to heap exhaustion, resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-42264

A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 4 products, the same list as for CVE-2026-8286

Known not affected 61 products, the same list as for CVE-2026-8286

Threats

Impact Important

CVE-2026-42499

A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1046 - Creation of Immutable Text Using String Concatenation

Affected products

Fixed 8 products, the same list as for CVE-2026-39820

Known not affected 57 products, the same list as for CVE-2026-39820

Threats

Impact Important

CVE-2026-44705

A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the designated temporary directory. This could lead to unauthorized file creation at attacker-controlled locations with the privileges of the running process.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 12 products, the same list as for CVE-2026-13149

Known not affected 53 products, the same list as for CVE-2026-13149

Threats

Impact Important

CVE-2026-45149

A flaw was found in the brace-expansion library. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a large numeric range for expansion. The library allocates excessive memory to generate all intermediate elements before applying the maximum limit, leading to high memory consumption and potential application crashes. This can impact the availability of systems using the library.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Moderate

CVE-2026-45416

A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-45623

A flaw was found in PostCSS, a tool that processes CSS files. An attacker who provides specially crafted CSS input containing a malicious source map comment can cause the system to read arbitrary files from the local filesystem. This can lead to the disclosure of sensitive information, specifically the first few bytes of file content. Additionally, this vulnerability may be exploited to cause a Denial of Service (DoS) by targeting large files, making the system unavailable.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64	—	Vendor Fix fix

Known not affected 61 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64		—

Threats

Impact Moderate

CVE-2026-45674

A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-46597

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-681 - Incorrect Conversion between Numeric Types

Affected products

Fixed 4 products, the same list as for CVE-2026-27136

Known not affected 61 products, the same list as for CVE-2026-27136

Threats

Impact Important

CVE-2026-46681

A flaw was found in the `@nevware21/ts-utils` library. This vulnerability allows a remote attacker to manipulate the fundamental properties of objects within an application. By exploiting this, an attacker could potentially execute unauthorized code, leading to a complete compromise of the application.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 4 products, the same list as for CVE-2026-8286

Known not affected 61 products, the same list as for CVE-2026-8286

Threats

Impact Important

CVE-2026-47691

A flaw was found in Netty's `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 4 products, the same list as for CVE-2025-55163

Known not affected 61 products, the same list as for CVE-2025-55163

Threats

Impact Important

CVE-2026-48020

A flaw was found in Traefik, an HTTP reverse proxy and load balancer. This vulnerability exists in the StripPrefix middleware, allowing an unauthenticated attacker to bypass route-level authentication and authorization. By crafting a request path containing '..' or its percent-encoded form, an attacker can access protected backend paths, such as administrative or internal configuration endpoints, without proper authentication. This could lead to unauthorized information disclosure or modification of sensitive settings.

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products, the same list as for CVE-2026-27136

Known not affected 61 products, the same list as for CVE-2026-27136

Threats

Impact Important

CVE-2026-48068

A flaw was found in @grpc/grpc-js, a pure JavaScript gRPC client and server library. An invalid incoming HTTP/2 stream initiation can cause a server process to crash. This vulnerability affects all servers created using @grpc/grpc-js, and no workaround is available. An unauthenticated remote attacker can exploit this to cause a denial of service by sending a malformed HTTP/2 stream to a gRPC server.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-248 - Uncaught Exception

Affected products

Fixed 4 products, the same list as for CVE-2026-8286

Known not affected 61 products, the same list as for CVE-2026-8286

Threats

Impact Important

CVE-2026-48491

A flaw was found in Traefik, an HTTP reverse proxy and load balancer. This vulnerability allows an unauthenticated client to bypass mutual Transport Layer Security (TLS) enforcement, a security measure that verifies both client and server identities. The bypass occurs due to an issue in Traefik's domain-fronting protection (SNICheck), which incorrectly processes TLS options for HTTP Host headers. As a result, an attacker can gain unauthorized access to protected backend services without presenting a required client certificate.

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 4 products, the same list as for CVE-2026-27136

Known not affected 61 products, the same list as for CVE-2026-27136

Threats

Impact Important

CVE-2026-49978

A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting (XSS) attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a `<template>.content`. This oversight allows an attacker to embed malicious code, such as JavaScript, which could then execute when the sanitized template is used by an application, potentially leading to unauthorized actions or information disclosure.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64	—	Vendor Fix fix

Known not affected 57 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64		—

Threats

Impact Important

CVE-2026-50010

A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager (X509TrustManager), it fails to perform necessary hostname checks, enabling an attacker to impersonate a legitimate server. This could lead to sensitive information disclosure or man-in-the-middle attacks.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-50193

A flaw was found in jackson-databind, a general-purpose data-binding library for Jackson Data Processor. A remote attacker can exploit this vulnerability by sending deeply nested JSON (JavaScript Object Notation) data to a service that reads and processes it. This can lead to a Denial of Service (DoS) by consuming significant system resources, making the service unavailable to legitimate users.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le	—	Vendor Fix fix Workaround

Known not affected 53 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64	—	Workaround

Threats

Impact Important

CVE-2026-53488

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.

8.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-27136

Known not affected 61 products, the same list as for CVE-2026-27136

Threats

Impact Important

CVE-2026-53492

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 4 products, the same list as for CVE-2026-27136

Known not affected 61 products, the same list as for CVE-2026-27136

Threats

Impact Important

CVE-2026-53622

A flaw was found in Traefik, an HTTP reverse proxy and load balancer. This critical vulnerability in Traefik's HTTP/3 (QUIC) TLS configuration selection allows unauthenticated clients to bypass router-specific mutual Transport Layer Security (mTLS) enforcement. When HTTP/3 is enabled and a router uses wildcard host rules or case-insensitive hostname matching with client certificate authentication, an attacker can complete the QUIC handshake without presenting a certificate. This bypass grants unauthorized access to a backend that should be protected by mTLS.

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-289 - Authentication Bypass by Alternate Name

Affected products

Fixed 4 products, the same list as for CVE-2026-27136

Known not affected 61 products, the same list as for CVE-2026-27136

Threats

Impact Important

CVE-2026-54399

A flaw was found in Apache HttpComponents Core. This uncontrolled resource consumption vulnerability in the HTTP/1.1 message parser allows a remote attacker to cause a denial of service through memory exhaustion. This can be triggered by sending messages with an excessive number of headers or excessive header length.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-54428

A flaw was found in Apache HttpComponents Core. This vulnerability, located in the HTTP/2 HPACK decoder, allows a remote attacker to cause a denial of service. By sending oversized compressed header blocks, an attacker can exhaust memory resources before the system's configured header list size limit is applied. This can lead to the affected system becoming unresponsive.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-54512

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-502 - Deserialization of Untrusted Data

Affected products

Fixed 12 products, the same list as for CVE-2026-50193

Known not affected 53 products, the same list as for CVE-2026-50193

Threats

Impact Important

CVE-2026-54513

A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the execution of malicious code. This could result in a complete compromise of the affected system, impacting its confidentiality, integrity, and availability.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-184 - Incomplete List of Disallowed Inputs

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-54763

A flaw was found in Traefik, an HTTP reverse proxy and load balancer. The BasicAuth, DigestAuth, and ForwardAuth middlewares in Traefik do not correctly treat underscore-variant header names. This allows a remote attacker to inject a specially crafted header that bypasses Traefik's security mechanisms. As a result, the attacker can spoof identity or authorization context to the backend, potentially gaining unauthorized access to protected resources.

10.0 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

CWE-178 - Improper Handling of Case Sensitivity

Affected products

Fixed 4 products, the same list as for CVE-2026-27136

Known not affected 61 products, the same list as for CVE-2026-27136

Threats

Impact Important

CVE-2026-55831

A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service (DoS) due to heap growth and increased CPU usage.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-55833

A flaw was found in Netty, a network application framework. A remote attacker could exploit a vulnerability in the SPDY header decoding process. By sending a specially crafted, small compressed header block, the attacker can cause it to expand significantly during decompression, leading to excessive CPU usage and memory allocation. This can result in a denial of service (DoS) due to resource exhaustion.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-56745

A flaw was found in Netty. A remote attacker can exploit a vulnerability in the `SpdyHttpDecoder` handler of Netty's SPDY-to-HTTP codec. When processing a client-initiated `SYN_STREAM` frame, the decoder fails to release allocated memory if the stream is reset or content limits are exceeded. This oversight leads to native memory exhaustion, which can result in a Denial of Service (DoS) for the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-56746

A flaw was found in Netty, a network application framework. A remote attacker can bypass security controls in the `CorsHandler` component by sending a specially crafted request with a null origin header. This bypasses the intended access restrictions, allowing unauthorized requests to reach the backend application. This could lead to a compromise of data integrity by allowing unauthorized actions.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-56819

A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing the application to crash and resulting in a Denial of Service (DoS). The issue occurs because the framework fails to release retained memory buffers when processing DATA frames for a stream whose decompressor has already been closed.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-911 - Improper Update of Reference Count

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-59296

A flaw was found in Micrometer's StatsD and Logging meter registries. This vulnerability allows a remote attacker to inject line terminators into metric data, such as names or tag values, due to insufficient sanitization of untrusted input. Exploitation can lead to the spoofing of arbitrary metrics, including critical system or business metrics, and the injection of false log entries, potentially impacting monitoring and auditing systems.

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Moderate

CVE-2026-59869

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 8 products, the same list as for CVE-2026-49978

Known not affected 57 products, the same list as for CVE-2026-49978

Threats

Impact Important

CVE-2026-59873

A flaw was found in node-tar, a tar archive manipulation library for Node.js. This vulnerability allows a remote attacker to craft a small gzip bomb, which, when processed, can lead to the exhaustion of disk space and CPU resources. This occurs because node-tar does not enforce strict limits on the total decompressed data, the number of entries, or the decompression ratio during extraction and parsing. The primary impact is a Denial of Service (DoS), making the affected system or application unavailable.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products, the same list as for CVE-2026-49978

Known not affected 57 products, the same list as for CVE-2026-49978

Threats

Impact Important

CVE-2026-59874

A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop, repeatedly parsing the same header and preventing further processing. This can lead to a denial of service (DoS) condition, making the affected system or application unresponsive.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 8 products, the same list as for CVE-2026-49978

Known not affected 57 products, the same list as for CVE-2026-49978

Threats

Impact Important

CVE-2026-59877

A flaw was found in protobufjs, a JavaScript (JS) library for compiling protobuf definitions. A remote attacker could exploit this vulnerability by providing a specially crafted .proto schema. This schema, designed to prematurely end an option declaration, can cause the library's parsing functions to loop indefinitely. This leads to a Denial of Service (DoS), making the affected system unresponsive.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 4 products, the same list as for CVE-2026-8286

Known not affected 61 products, the same list as for CVE-2026-8286

Threats

Impact Important

CVE-2026-59888

A flaw was found in jackson-databind. When Java Records use a PropertyNamingStrategy, an attacker can bypass the @JsonIgnore annotation during deserialization. This allows a renamed JSON key to be assigned to a Record constructor parameter, even if it was intended to be ignored. Consequently, an untrusted client could set internal or privileged components from external input, potentially leading to unauthorized modification or disclosure of sensitive data.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:61a523a9663ff94b984f06fb72a570a18faf326b5efe6ef7d3ba55f96d4e422f_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:a4f8b673fd049befb193ee8f93ac8167b784cfe35b5de3584b19a95c726d9cff_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73b5fef7a238e3a16a0b724a8022588a4f69195743bf489f2bb01e4d3a59113_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:121aee11bc25d5e983808691d3b82905048b5a67ffb01f61c86815867e4e8d08_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:7ba97ebd86b3442cd95ffa2605b7890e2f85731ae84ee696d18bae0633439afe_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9eccdaac68f3ce6a42a435ceb511483d0f233fb21b3dee8343b8d70cbd67f2ac_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:f74ce43b7d8ade25e5b0f78a41f87db5c6005a85f48cde956b9a87a5892c3a87_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:1ad319aa2d1f00c745609246ea315955298a7028afe3fc5502a68c2d1b5c8467_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:29840664ab5a92cebe5aef4ca45e14c558fe92b832a9d2b8ddec426eaed93144_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:4e76c5cb1ed229c3c1d51beedad3e7970a29c55d32cfc0500153fded3dc8a1c9_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/server-rhel9@sha256:908382349b4ba81195c2fdc9e650d304cd868ff94d809414d7e44947f2725e0c_amd64	—	Vendor Fix fix

Known not affected 53 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:37194dd2cd72d6cdb57ca93fd1cfe6e4aa70ec826a3e86032cde0d0738262bd2_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:5fcb1e5c626c5d3aa85e0ec98062a44803d2815871236a3b7541b95078997c78_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:8f84e4d5f4cf71219fbed65092645ded0df00369b42b5487ddef7d0c6cac331b_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-rhel9@sha256:e576efc0fbec5378a870880a7bce40327a86203f2ff426fb62d8c767f125761a_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:5093c89215a4dd74643a2911ce3e3f9e351fda5adf71ee897b7b702840025d47_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:803f8b179959a2b20c71876814b09bae7e5ee15cc2dc0a7e7e1fded75a52fc8c_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:af4e4fde13a96dd7fd6126bc67927e1873f12fc3263f749527603e60e75e8f5e_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:bce9235e326ab64aabbe7080ca74cbd24d6f9090819d82d9f2f7abb814e3b26f_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:0a1d01a849daf85556bea32c69dde2621021d28ed33c6f1268375345df1c9409_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:14a9baa0a9f39517264880f36689046f91f4ddadd383de1a28a56468de08c7bd_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b2cd6a2da440d20b39571dbee7bd31c49ad7a7411530735c8896ac38e30ce4b3_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/configbump-rhel9@sha256:b3bba37ab9e9d214ff805510072ea56ea9a2e0bc07c42244bc330dd595befedb_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:08bb9bfbb83303d07932903db066c32bfdd3f2acbffd99b40de60e61ab05175b_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:467c2c6858ff7ea5a2c6dca1bb95638c9bc4f99ebcda932bb3bfc65f82f82155_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:6ec7b2a574f90ee5629cae48ce32544fb429aadbbee22eb88992932e7e80a28a_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca56033e3eec4a8fc2432418141f5c76a4c7c52391d14ff023c67f5c315cae39_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3f4b18a7d40ff1b17e6610ab2e6a79b77e3e9f9026b2d1a77f2892ae3ec7c4a0_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:562e100628a6d9b06f519e8d2a555bdaa43b79e7f30870dc94da9c87dac3fcb6_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:5b96816dc89ecd3b6db02011805a3ed9069f5db86b4158eac8b2f931f0e9532b_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:cd0d86c44dc30c77d2876540a75249fbcb0cb1b3ecf4d14394f6eebe2061f9a6_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d98a5605205445fe1fd9a8f439b09918eb187eef468a0546a911c5ee1d00f851_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:130cf3c00d9042bdc07da56eee755b2682a13f77b9bd445ca9369e7aee9f02cf_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5f5b25b4cbfa35f731247c948d83f31b100fa99c0126a964fbd46bab9c204b55_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:7f0a8c6cdbc3031e5e0193819310640f115a658ff4883914b1876c9a21dc010a_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:c722c2cdf62c8dc9953dde8a5cb283c3afece2e7925b4213c6cb6afa76004f29_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:188e877e1d78b19fa479d4b2815fc0d48fb8a048274d7f3aa37f5bf7e16523dd_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:36779d828279ae8078a29ce39ed42d8311fe40fb13347533e2d0652a23a2324f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8e216bcc9a9f70469bbd1b91e94d30e74d6fb8cc650bf2ca562a0aa6e82591f7_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9889305d3ba264f5e015a58e355840b90807995d2e1fb672e64c42fd4d4f070b_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:10bcd975f5d03858c30d65f8969391b72a05ff69cdf881de3c27a89272bb39e8_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:99392ab8ee91b46131519490ea92adef817140751f84c5ef421a59369deb04da_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f69a7c87ff903073da4602b2daa377d714117960aacd7e5912b94ae752dfec08_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f7587af345f0bf512627705f8543b8533b0d92fd5e845fc3c6c84094c277cc1e_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:122bbd2d696d9ac1a98a6d587c4ebb503ae13eac888bd63c48695aeef5a3ec93_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:8e7d83f45214e9841238d396ecf3e89ce4b43910f951136bf9e792b224ab09e7_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:98164a2ff734c7d74b8bf9d55db9aafc2e1922baf8e4146efed21642e022a513_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:af08600dbbfde6a494e4a54ddfaae4f067778412b8bbaa0e0d6ff22018121438_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:38a0acf8e97a7d0c6a4c8d6815321e35df6ad35736a7338267ce9b5adb118662_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:8b8f3387a3764beb3d8ad6a027b05f42619ccf33165e733e8dc7b3f135895dc5_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:b338c1060dd859a8747e0812e176ab266d338aea799becd41e48afc50061fb82_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/traefik-rhel9@sha256:ba0aebd6b6b6ceb676b6990d5bd9f3b7efe40cedd9407149da92c55435ef7db6_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1e1215926b9d71cc0131148ad92f4ea8ea8b1e2ba72d6f73396601fceac5ee75_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4cd3b940aa076240f9c7e1fffd05c6bd739a76f31f94d2e4e80ce109fec27206_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:4fb0b9f0ab3c37feeace62a178b6abd0e25797cb9ea326c4e1c079ad7791c7a2_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel10@sha256:b0b215ef0b00aff4be01e9c7718f92ef0c249782e37ad5fde717d9b76e112a92_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:1a1dc37c6638cf1bbbcdef28032f1e5e847d99566a8b76338376245798fdcf92_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:67a090d14c2859d30419de71d46f85b71d8bfb8ea0f831f103be9a236af1153c_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:6a14d27e13cfc97103437c822cb7becf22d9a6c2fcb94729c977d6d5ffecaa0d_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-base-rhel9@sha256:eaab16b83d494e162ab01c2476c548907eababda4b20317666f41119467c6890_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:2ee7edad219c94eb91465132570a8180b038c0e1e94e4c20f15ac20388d443a2_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:3e9d56b1c640ac770ef67309529a662c36a24858b4c0d74273e72c6398181cf4_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:bde7602ad25518d0344589c2efe1ff51af32e3070292751cb4a3e1de9788d291_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.30:registry.redhat.io/devspaces/udi-rhel9@sha256:ee6cce6ce7461624def1638ac43fbf4cf81a9fc2f88a0729fca1399d19e78820_amd64		—

Threats

Impact Moderate

CVE-2026-59899

A flaw was found in the Netty netty-codec-http component. A remote attacker can send HTTP requests containing highly compressed data. The HTTP decoder in netty-codec-http fails to properly limit the decompression of this content, causing the system to consume excessive memory. This can lead to memory exhaustion and a denial of service (DoS), making the service unavailable to legitimate users.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)

Affected products

Fixed 8 products, the same list as for CVE-2026-9563

Known not affected 57 products, the same list as for CVE-2026-9563

Threats

Impact Important

CVE-2026-65600

A flaw was found in Traefik. An unauthenticated remote attacker can bypass authentication due to a path traversal vulnerability in the ReplacePathRegex middleware. When this middleware is misconfigured, it forwards un-normalized paths, allowing a backend to resolve them to protected routes and grant unauthorized access. This bypass enables access to sensitive administrative interfaces.

10.0 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products, the same list as for CVE-2026-27136

Known not affected 61 products, the same list as for CVE-2026-27136

Threats

Impact Low

CVE-2026-65601

A flaw was found in Traefik, a cloud-native edge router. A low-privileged user in a Kubernetes environment could exploit a namespace confusion vulnerability within the Kubernetes Gateway API provider. This flaw allows an attacker to bypass security controls by incorrectly binding a Traefik Middleware from a different namespace, potentially leading to the injection of trusted identity headers into network requests. This could result in unauthorized access or privilege escalation within the Kubernetes cluster.

9.6 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-348 - Use of Less Trusted Source

Affected products

Fixed 4 products, the same list as for CVE-2026-27136

Known not affected 61 products, the same list as for CVE-2026-27136

Threats

Impact Important

CVE-2026-67213

A flaw was found in nanoid (Nano ID), a small, secure, and URL-friendly unique string ID generator. An attacker could exploit this vulnerability by providing a zero-size input to the customAlphabet or customRandom functions. This would cause an infinite loop, leading to a denial of service (DoS) condition by hanging the application's calling thread.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 4 products, the same list as for CVE-2026-8286

Known not affected 61 products, the same list as for CVE-2026-8286

Threats

Impact Important

CVE-2026-67214

A flaw was found in nanoid (Nano ID), a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a negative size is provided, these functions enter an infinite loop, causing the application to hang indefinitely and disrupting service availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-839 - Numeric Range Comparison Without Minimum Check

Affected products

Fixed 8 products, the same list as for CVE-2026-49978

Known not affected 57 products, the same list as for CVE-2026-49978

Threats

Impact Important

CVE-2026-68494

A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 12 products, the same list as for CVE-2026-59888

Known not affected 53 products, the same list as for CVE-2026-59888

Threats

Impact Important

CVE-2026-69152

A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-8286

Known not affected 61 products, the same list as for CVE-2026-8286

Threats

Impact Important

CVE-2026-69153

A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration (the 'from' parameter) is not set. This can cause the application to read and expose unintended source-map files, potentially revealing sensitive information about the application's source code.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products, the same list as for CVE-2026-45623

Known not affected 61 products, the same list as for CVE-2026-45623

Threats

Impact Moderate

CVE-2026-73086

A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the `nanoid(size)` function. This issue causes the internal random number generator to become predictable, leading to the generation of identical identifiers for session tokens, security tokens (Cross-Site Request Forgery (CSRF) tokens), and API keys. Such predictability could allow an attacker to bypass security measures that rely on unique and random identifiers.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-1241 - Use of Predictable Algorithm in Random Number Generator

Affected products

Fixed 4 products, the same list as for CVE-2026-8286

Known not affected 61 products, the same list as for CVE-2026-8286

Threats

Impact Important

CVE-2026-73566

A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could provide a specially crafted tar archive with a long-path header. When processing this archive with a non-empty member-selection list, an uncontrolled recursion in the `filesFilter` function can lead to a stack overflow. This issue results in a denial of service (DoS) by terminating Node.js applications that consume these archives.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-8286

Known not affected 61 products, the same list as for CVE-2026-8286

Threats

Impact Important

CVE-2026-73646

A flaw was found in PostCSS. An attacker can exploit a path traversal vulnerability by providing specially crafted `sourceMappingURL` values in untrusted CSS files. This allows the attacker to disclose sensitive `sourcesContent` from arbitrary `.map` files accessible on the system, leading to information disclosure.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products, the same list as for CVE-2026-45623

Known not affected 61 products, the same list as for CVE-2026-45623

Threats

Impact Important

CVE-2026-75838

A flaw was found in DOMPurify. This cross-site scripting vulnerability occurs during IN_PLACE sanitization, where element-removal hooks fail to neutralize detached subtrees. A remote attacker can exploit this by supplying specially crafted HTML with event handlers. This allows the execution of malicious scripts even after the HTML appears to be sanitized, leading to potential information disclosure or unauthorized actions.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products, the same list as for CVE-2026-45623

Known not affected 61 products, the same list as for CVE-2026-45623

Threats

Impact Moderate

References

539 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:62260	self
https://access.redhat.com/documentation/en-us/red…	external
https://access.redhat.com/security/cve/CVE-2025-55163	external
https://access.redhat.com/security/cve/CVE-2026-10050	external
https://access.redhat.com/security/cve/CVE-2026-10051	external
https://access.redhat.com/security/cve/CVE-2026-12143	external
https://access.redhat.com/security/cve/CVE-2026-12151	external
https://access.redhat.com/security/cve/CVE-2026-13149	external
https://access.redhat.com/security/cve/CVE-2026-15075	external
https://access.redhat.com/security/cve/CVE-2026-15076	external
https://access.redhat.com/security/cve/CVE-2026-27136	external
https://access.redhat.com/security/cve/CVE-2026-34986	external
https://access.redhat.com/security/cve/CVE-2026-39820	external
https://access.redhat.com/security/cve/CVE-2026-39831	external
https://access.redhat.com/security/cve/CVE-2026-39835	external
https://access.redhat.com/security/cve/CVE-2026-40898	external
https://access.redhat.com/security/cve/CVE-2026-40983	external
https://access.redhat.com/security/cve/CVE-2026-40984	external
https://access.redhat.com/security/cve/CVE-2026-41242	external
https://access.redhat.com/security/cve/CVE-2026-41695	external
https://access.redhat.com/security/cve/CVE-2026-41716	external
https://access.redhat.com/security/cve/CVE-2026-42264	external
https://access.redhat.com/security/cve/CVE-2026-42499	external
https://access.redhat.com/security/cve/CVE-2026-44705	external
https://access.redhat.com/security/cve/CVE-2026-45149	external
https://access.redhat.com/security/cve/CVE-2026-45416	external
https://access.redhat.com/security/cve/CVE-2026-45623	external
https://access.redhat.com/security/cve/CVE-2026-45674	external
https://access.redhat.com/security/cve/CVE-2026-46597	external
https://access.redhat.com/security/cve/CVE-2026-46681	external
https://access.redhat.com/security/cve/CVE-2026-47691	external
https://access.redhat.com/security/cve/CVE-2026-48020	external
https://access.redhat.com/security/cve/CVE-2026-48068	external
https://access.redhat.com/security/cve/CVE-2026-48491	external
https://access.redhat.com/security/cve/CVE-2026-49978	external
https://access.redhat.com/security/cve/CVE-2026-50010	external
https://access.redhat.com/security/cve/CVE-2026-50193	external
https://access.redhat.com/security/cve/CVE-2026-53488	external
https://access.redhat.com/security/cve/CVE-2026-53492	external
https://access.redhat.com/security/cve/CVE-2026-53622	external
https://access.redhat.com/security/cve/CVE-2026-54399	external
https://access.redhat.com/security/cve/CVE-2026-54428	external
https://access.redhat.com/security/cve/CVE-2026-54512	external
https://access.redhat.com/security/cve/CVE-2026-54513	external
https://access.redhat.com/security/cve/CVE-2026-54763	external
https://access.redhat.com/security/cve/CVE-2026-55831	external
https://access.redhat.com/security/cve/CVE-2026-55833	external
https://access.redhat.com/security/cve/CVE-2026-56745	external
https://access.redhat.com/security/cve/CVE-2026-56746	external
https://access.redhat.com/security/cve/CVE-2026-56819	external
https://access.redhat.com/security/cve/CVE-2026-59296	external
https://access.redhat.com/security/cve/CVE-2026-59869	external
https://access.redhat.com/security/cve/CVE-2026-59873	external
https://access.redhat.com/security/cve/CVE-2026-59874	external
https://access.redhat.com/security/cve/CVE-2026-59877	external
https://access.redhat.com/security/cve/CVE-2026-59888	external
https://access.redhat.com/security/cve/CVE-2026-59899	external
https://access.redhat.com/security/cve/CVE-2026-65600	external
https://access.redhat.com/security/cve/CVE-2026-65601	external
https://access.redhat.com/security/cve/CVE-2026-67213	external
https://access.redhat.com/security/cve/CVE-2026-67214	external
https://access.redhat.com/security/cve/CVE-2026-68494	external
https://access.redhat.com/security/cve/CVE-2026-69152	external
https://access.redhat.com/security/cve/CVE-2026-69153	external
https://access.redhat.com/security/cve/CVE-2026-73086	external
https://access.redhat.com/security/cve/CVE-2026-73566	external
https://access.redhat.com/security/cve/CVE-2026-73646	external
https://access.redhat.com/security/cve/CVE-2026-75838	external
https://access.redhat.com/security/cve/CVE-2026-8286	external
https://access.redhat.com/security/cve/CVE-2026-9277	external
https://access.redhat.com/security/cve/CVE-2026-9547	external
https://access.redhat.com/security/cve/CVE-2026-9563	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-55163	self
https://bugzilla.redhat.com/show_bug.cgi?id=2388252	external
https://www.cve.org/CVERecord?id=CVE-2025-55163	external
https://nvd.nist.gov/vuln/detail/CVE-2025-55163	external
https://github.com/netty/netty/security/advisorie…	external
https://kb.cert.org/vuls/id/767506	external
https://access.redhat.com/security/cve/CVE-2026-8286	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496763	external
https://www.cve.org/CVERecord?id=CVE-2026-8286	external
https://nvd.nist.gov/vuln/detail/CVE-2026-8286	external
https://curl.se/docs/CVE-2026-8286.html	external
https://curl.se/docs/CVE-2026-8286.json	external
https://hackerone.com/reports/3718195	external
https://access.redhat.com/security/cve/CVE-2026-9277	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480741	external
https://www.cve.org/CVERecord?id=CVE-2026-9277	external
https://nvd.nist.gov/vuln/detail/CVE-2026-9277	external
https://github.com/ljharb/shell-quote	external
https://github.com/ljharb/shell-quote/commit/1518179	external
https://github.com/ljharb/shell-quote/security/ad…	external
https://www.npmjs.com/package/shell-quote	external
https://access.redhat.com/security/cve/CVE-2026-9547	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496758	external
https://www.cve.org/CVERecord?id=CVE-2026-9547	external
https://nvd.nist.gov/vuln/detail/CVE-2026-9547	external
https://curl.se/docs/CVE-2026-9547.html	external
https://curl.se/docs/CVE-2026-9547.json	external
https://hackerone.com/reports/3751712	external
https://access.redhat.com/security/cve/CVE-2026-9563	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496411	external
https://www.cve.org/CVERecord?id=CVE-2026-9563	external
https://nvd.nist.gov/vuln/detail/CVE-2026-9563	external
https://github.com/eclipse-ee4j/parsson/commit/13…	external
https://github.com/eclipse-ee4j/parsson/pull/169	external
https://github.com/eclipse-ee4j/parsson/tree/1.1.8	external
https://gitlab.eclipse.org/security/vulnerability…	external
https://repo.maven.apache.org/maven2/org/eclipse/…	external
https://access.redhat.com/security/cve/CVE-2026-10050	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510732	external
https://www.cve.org/CVERecord?id=CVE-2026-10050	external
https://nvd.nist.gov/vuln/detail/CVE-2026-10050	external
https://access.redhat.com/security/cve/CVE-2026-10051	self
https://bugzilla.redhat.com/show_bug.cgi?id=2499928	external
https://www.cve.org/CVERecord?id=CVE-2026-10051	external
https://nvd.nist.gov/vuln/detail/CVE-2026-10051	external
https://gitlab.eclipse.org/security/cve-assignmen…	external
https://access.redhat.com/security/cve/CVE-2026-12143	self
https://bugzilla.redhat.com/show_bug.cgi?id=2488480	external
https://www.cve.org/CVERecord?id=CVE-2026-12143	external
https://nvd.nist.gov/vuln/detail/CVE-2026-12143	external
https://cwe.mitre.org/data/definitions/93.html	external
https://github.com/form-data/form-data/commit/641…	external
https://github.com/form-data/form-data/commit/be3…	external
https://github.com/form-data/form-data/commit/c71…	external
https://github.com/form-data/form-data/security/a…	external
https://html.spec.whatwg.org/multipage/form-contr…	external
https://www.npmjs.com/package/form-data	external
https://access.redhat.com/security/cve/CVE-2026-12151	self
https://bugzilla.redhat.com/show_bug.cgi?id=2489980	external
https://www.cve.org/CVERecord?id=CVE-2026-12151	external
https://nvd.nist.gov/vuln/detail/CVE-2026-12151	external
https://cna.openjsf.org/security-advisories.html	external
https://github.com/nodejs/undici/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-13149	self
https://bugzilla.redhat.com/show_bug.cgi?id=2494813	external
https://www.cve.org/CVERecord?id=CVE-2026-13149	external
https://nvd.nist.gov/vuln/detail/CVE-2026-13149	external
https://github.com/juliangruber/brace-expansion/c…	external
https://www.npmjs.com/package/brace-expansion	external
https://access.redhat.com/security/cve/CVE-2026-15075	self
https://bugzilla.redhat.com/show_bug.cgi?id=2499919	external
https://www.cve.org/CVERecord?id=CVE-2026-15075	external
https://nvd.nist.gov/vuln/detail/CVE-2026-15075	external
https://gitlab.eclipse.org/security/cve-assignmen…	external
https://access.redhat.com/security/cve/CVE-2026-15076	self
https://bugzilla.redhat.com/show_bug.cgi?id=2499914	external
https://www.cve.org/CVERecord?id=CVE-2026-15076	external
https://nvd.nist.gov/vuln/detail/CVE-2026-15076	external
https://gitlab.eclipse.org/security/cve-assignmen…	external
https://access.redhat.com/security/cve/CVE-2026-27136	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480757	external
https://www.cve.org/CVERecord?id=CVE-2026-27136	external
https://nvd.nist.gov/vuln/detail/CVE-2026-27136	external
https://go.dev/cl/781685	external
https://go.dev/issue/79575	external
https://groups.google.com/g/golang-announce/c/iI-…	external
https://pkg.go.dev/vuln/GO-2026-5030	external
https://access.redhat.com/security/cve/CVE-2026-34986	self
https://bugzilla.redhat.com/show_bug.cgi?id=2455470	external
https://www.cve.org/CVERecord?id=CVE-2026-34986	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34986	external
https://github.com/go-jose/go-jose/security/advis…	external
https://pkg.go.dev/github.com/go-jose/go-jose/v4#…	external
https://access.redhat.com/security/cve/CVE-2026-39820	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467820	external
https://www.cve.org/CVERecord?id=CVE-2026-39820	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39820	external
https://go.dev/cl/759940	external
https://go.dev/issue/78566	external
https://groups.google.com/g/golang-announce/c/qcC…	external
https://pkg.go.dev/vuln/GO-2026-4986	external
https://access.redhat.com/security/cve/CVE-2026-39831	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480675	external
https://www.cve.org/CVERecord?id=CVE-2026-39831	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39831	external
https://go.dev/cl/781662	external
https://go.dev/issue/79566	external
https://groups.google.com/g/golang-announce/c/a08…	external
https://pkg.go.dev/vuln/GO-2026-5019	external
https://access.redhat.com/security/cve/CVE-2026-39835	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480680	external
https://www.cve.org/CVERecord?id=CVE-2026-39835	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39835	external
https://go.dev/cl/781660	external
https://go.dev/issue/79563	external
https://pkg.go.dev/vuln/GO-2026-5015	external
https://access.redhat.com/security/cve/CVE-2026-40898	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484875	external
https://www.cve.org/CVERecord?id=CVE-2026-40898	external
https://nvd.nist.gov/vuln/detail/CVE-2026-40898	external
https://github.com/quic-go/quic-go/releases/tag/v0.59.1	external
https://github.com/quic-go/quic-go/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-40983	self
https://bugzilla.redhat.com/show_bug.cgi?id=2486697	external
https://www.cve.org/CVERecord?id=CVE-2026-40983	external
https://nvd.nist.gov/vuln/detail/CVE-2026-40983	external
https://spring.io/security/cve-2026-40983	external
https://access.redhat.com/security/cve/CVE-2026-40984	self
https://bugzilla.redhat.com/show_bug.cgi?id=2486716	external
https://www.cve.org/CVERecord?id=CVE-2026-40984	external
https://nvd.nist.gov/vuln/detail/CVE-2026-40984	external
https://spring.io/security/cve-2026-40984	external
https://access.redhat.com/security/cve/CVE-2026-41242	self
https://bugzilla.redhat.com/show_bug.cgi?id=2459442	external
https://www.cve.org/CVERecord?id=CVE-2026-41242	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41242	external
https://github.com/protobufjs/protobuf.js/commit/…	external
https://github.com/protobufjs/protobuf.js/commit/…	external
https://github.com/protobufjs/protobuf.js/release…	external
https://github.com/protobufjs/protobuf.js/release…	external
https://github.com/protobufjs/protobuf.js/securit…	external
https://access.redhat.com/security/cve/CVE-2026-41695	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487386	external
https://www.cve.org/CVERecord?id=CVE-2026-41695	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41695	external
https://spring.io/security/cve-2026-41695	external
https://access.redhat.com/security/cve/CVE-2026-41716	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487394	external
https://www.cve.org/CVERecord?id=CVE-2026-41716	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41716	external
https://spring.io/security/cve-2026-41716	external
https://access.redhat.com/security/cve/CVE-2026-42264	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467927	external
https://www.cve.org/CVERecord?id=CVE-2026-42264	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42264	external
https://github.com/axios/axios/commit/47915144662…	external
https://github.com/axios/axios/pull/10779	external
https://github.com/axios/axios/releases/tag/v1.15.2	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-42499	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467809	external
https://www.cve.org/CVERecord?id=CVE-2026-42499	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42499	external
https://go.dev/cl/771520	external
https://go.dev/issue/78987	external
https://pkg.go.dev/vuln/GO-2026-4977	external
https://access.redhat.com/security/cve/CVE-2026-44705	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487946	external
https://www.cve.org/CVERecord?id=CVE-2026-44705	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44705	external
https://github.com/raszi/node-tmp/security/adviso…	external
https://access.redhat.com/security/cve/CVE-2026-45149	self
https://bugzilla.redhat.com/show_bug.cgi?id=2483481	external
https://www.cve.org/CVERecord?id=CVE-2026-45149	external
https://nvd.nist.gov/vuln/detail/CVE-2026-45149	external
https://github.com/juliangruber/brace-expansion/s…	external
https://access.redhat.com/security/cve/CVE-2026-45416	self
https://bugzilla.redhat.com/show_bug.cgi?id=2488391	external
https://www.cve.org/CVERecord?id=CVE-2026-45416	external
https://nvd.nist.gov/vuln/detail/CVE-2026-45416	external
https://github.com/netty/netty/releases/tag/netty…	external
https://github.com/netty/netty/releases/tag/netty…	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-45623	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507595	external
https://www.cve.org/CVERecord?id=CVE-2026-45623	external
https://nvd.nist.gov/vuln/detail/CVE-2026-45623	external
https://github.com/postcss/postcss/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-45674	self
https://bugzilla.redhat.com/show_bug.cgi?id=2488400	external
https://www.cve.org/CVERecord?id=CVE-2026-45674	external
https://nvd.nist.gov/vuln/detail/CVE-2026-45674	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-46597	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480678	external
https://www.cve.org/CVERecord?id=CVE-2026-46597	external
https://nvd.nist.gov/vuln/detail/CVE-2026-46597	external
https://go.dev/cl/781620	external
https://go.dev/issue/79561	external
https://pkg.go.dev/vuln/GO-2026-5013	external
https://access.redhat.com/security/cve/CVE-2026-46681	self
https://bugzilla.redhat.com/show_bug.cgi?id=2503661	external
https://www.cve.org/CVERecord?id=CVE-2026-46681	external
https://nvd.nist.gov/vuln/detail/CVE-2026-46681	external
https://github.com/nevware21/ts-utils/commit/5e88…	external
https://github.com/nevware21/ts-utils/security/ad…	external
https://access.redhat.com/security/cve/CVE-2026-47691	self
https://bugzilla.redhat.com/show_bug.cgi?id=2488439	external
https://www.cve.org/CVERecord?id=CVE-2026-47691	external
https://nvd.nist.gov/vuln/detail/CVE-2026-47691	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-48020	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491915	external
https://www.cve.org/CVERecord?id=CVE-2026-48020	external
https://nvd.nist.gov/vuln/detail/CVE-2026-48020	external
https://github.com/traefik/traefik/releases/tag/v…	external
https://github.com/traefik/traefik/releases/tag/v3.6.19	external
https://github.com/traefik/traefik/releases/tag/v3.7.3	external
https://github.com/traefik/traefik/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-48068	self
https://bugzilla.redhat.com/show_bug.cgi?id=2499682	external
https://www.cve.org/CVERecord?id=CVE-2026-48068	external
https://nvd.nist.gov/vuln/detail/CVE-2026-48068	external
https://github.com/grpc/grpc-node/security/adviso…	external
https://access.redhat.com/security/cve/CVE-2026-48491	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491923	external
https://www.cve.org/CVERecord?id=CVE-2026-48491	external
https://nvd.nist.gov/vuln/detail/CVE-2026-48491	external
https://github.com/traefik/traefik/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-49978	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500695	external
https://www.cve.org/CVERecord?id=CVE-2026-49978	external
https://nvd.nist.gov/vuln/detail/CVE-2026-49978	external
https://github.com/cure53/DOMPurify/commit/ca30f0…	external
https://github.com/cure53/DOMPurify/releases/tag/3.4.7	external
https://github.com/cure53/DOMPurify/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-50010	self
https://bugzilla.redhat.com/show_bug.cgi?id=2488429	external
https://www.cve.org/CVERecord?id=CVE-2026-50010	external
https://nvd.nist.gov/vuln/detail/CVE-2026-50010	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-50193	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491999	external
https://www.cve.org/CVERecord?id=CVE-2026-50193	external
https://nvd.nist.gov/vuln/detail/CVE-2026-50193	external
https://github.com/FasterXML/jackson-databind/com…	external
https://github.com/FasterXML/jackson-databind/iss…	external
https://github.com/FasterXML/jackson-databind/sec…	external
https://access.redhat.com/security/cve/CVE-2026-53488	self
https://bugzilla.redhat.com/show_bug.cgi?id=2495815	external
https://www.cve.org/CVERecord?id=CVE-2026-53488	external
https://nvd.nist.gov/vuln/detail/CVE-2026-53488	external
https://github.com/containerd/containerd/security…	external
https://access.redhat.com/security/cve/CVE-2026-53492	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496130	external
https://www.cve.org/CVERecord?id=CVE-2026-53492	external
https://nvd.nist.gov/vuln/detail/CVE-2026-53492	external
https://github.com/containerd/containerd/security…	external
https://access.redhat.com/security/cve/CVE-2026-53622	self
https://bugzilla.redhat.com/show_bug.cgi?id=2491924	external
https://www.cve.org/CVERecord?id=CVE-2026-53622	external
https://nvd.nist.gov/vuln/detail/CVE-2026-53622	external
https://github.com/traefik/traefik/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-54399	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496101	external
https://www.cve.org/CVERecord?id=CVE-2026-54399	external
https://nvd.nist.gov/vuln/detail/CVE-2026-54399	external
http://www.openwall.com/lists/oss-security/2026/07/01/4	external
https://lists.apache.org/thread/zmxh1pl2zohov5ntd…	external
https://access.redhat.com/security/cve/CVE-2026-54428	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496106	external
https://www.cve.org/CVERecord?id=CVE-2026-54428	external
https://nvd.nist.gov/vuln/detail/CVE-2026-54428	external
http://www.openwall.com/lists/oss-security/2026/07/01/3	external
https://lists.apache.org/thread/5zjp8vczvxq19pw2r…	external
https://access.redhat.com/security/cve/CVE-2026-54512	self
https://bugzilla.redhat.com/show_bug.cgi?id=2492015	external
https://www.cve.org/CVERecord?id=CVE-2026-54512	external
https://nvd.nist.gov/vuln/detail/CVE-2026-54512	external
https://github.com/FasterXML/jackson-databind/com…	external
https://github.com/FasterXML/jackson-databind/iss…	external
https://github.com/FasterXML/jackson-databind/sec…	external
https://access.redhat.com/security/cve/CVE-2026-54513	self
https://bugzilla.redhat.com/show_bug.cgi?id=2492010	external
https://www.cve.org/CVERecord?id=CVE-2026-54513	external
https://nvd.nist.gov/vuln/detail/CVE-2026-54513	external
https://github.com/FasterXML/jackson-databind/com…	external
https://github.com/FasterXML/jackson-databind/com…	external
https://github.com/FasterXML/jackson-databind/iss…	external
https://github.com/FasterXML/jackson-databind/iss…	external
https://github.com/FasterXML/jackson-databind/pull/5984	external
https://github.com/FasterXML/jackson-databind/sec…	external
https://access.redhat.com/security/cve/CVE-2026-54763	self
https://bugzilla.redhat.com/show_bug.cgi?id=2497551	external
https://www.cve.org/CVERecord?id=CVE-2026-54763	external
https://nvd.nist.gov/vuln/detail/CVE-2026-54763	external
https://github.com/traefik/traefik/commit/108a526…	external
https://github.com/traefik/traefik/pull/13262	external
https://github.com/traefik/traefik/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-55831	self
https://bugzilla.redhat.com/show_bug.cgi?id=2503103	external
https://www.cve.org/CVERecord?id=CVE-2026-55831	external
https://nvd.nist.gov/vuln/detail/CVE-2026-55831	external
https://github.com/netty/netty/commit/5b68c61f37a…	external
https://github.com/netty/netty/commit/bb2ff68a1fb…	external
https://github.com/netty/netty/releases/tag/netty…	external
https://github.com/netty/netty/releases/tag/netty…	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-55833	self
https://bugzilla.redhat.com/show_bug.cgi?id=2503101	external
https://www.cve.org/CVERecord?id=CVE-2026-55833	external
https://nvd.nist.gov/vuln/detail/CVE-2026-55833	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-56745	self
https://bugzilla.redhat.com/show_bug.cgi?id=2505911	external
https://www.cve.org/CVERecord?id=CVE-2026-56745	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56745	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-56746	self
https://bugzilla.redhat.com/show_bug.cgi?id=2505422	external
https://www.cve.org/CVERecord?id=CVE-2026-56746	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56746	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-56819	self
https://bugzilla.redhat.com/show_bug.cgi?id=2505980	external
https://www.cve.org/CVERecord?id=CVE-2026-56819	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56819	external
https://github.com/netty/netty/commit/5b68c61f37a…	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-59296	self
https://bugzilla.redhat.com/show_bug.cgi?id=2520949	external
https://www.cve.org/CVERecord?id=CVE-2026-59296	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59296	external
https://spring.io/security/cve-2026-59296	external
https://access.redhat.com/security/cve/CVE-2026-59869	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498122	external
https://www.cve.org/CVERecord?id=CVE-2026-59869	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59869	external
https://github.com/nodeca/js-yaml/commit/24f13e79…	external
https://github.com/nodeca/js-yaml/commit/59423c6f…	external
https://github.com/nodeca/js-yaml/releases/tag/3.15.0	external
https://github.com/nodeca/js-yaml/releases/tag/4.3.0	external
https://github.com/nodeca/js-yaml/security/adviso…	external
https://access.redhat.com/security/cve/CVE-2026-59873	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498120	external
https://www.cve.org/CVERecord?id=CVE-2026-59873	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59873	external
https://github.com/isaacs/node-tar/commit/2812e93…	external
https://github.com/isaacs/node-tar/releases/tag/v7.5.19	external
https://github.com/isaacs/node-tar/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-59874	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498116	external
https://www.cve.org/CVERecord?id=CVE-2026-59874	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59874	external
https://github.com/isaacs/node-tar/commit/9e78bf0…	external
https://github.com/isaacs/node-tar/releases/tag/v7.5.18	external
https://github.com/isaacs/node-tar/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-59877	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498127	external
https://www.cve.org/CVERecord?id=CVE-2026-59877	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59877	external
https://github.com/protobufjs/protobuf.js/commit/…	external
https://github.com/protobufjs/protobuf.js/commit/…	external
https://github.com/protobufjs/protobuf.js/pull/2352	external
https://github.com/protobufjs/protobuf.js/release…	external
https://github.com/protobufjs/protobuf.js/release…	external
https://github.com/protobufjs/protobuf.js/securit…	external
https://access.redhat.com/security/cve/CVE-2026-59888	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500096	external
https://www.cve.org/CVERecord?id=CVE-2026-59888	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59888	external
https://github.com/FasterXML/jackson-databind/com…	external
https://github.com/FasterXML/jackson-databind/com…	external
https://github.com/FasterXML/jackson-databind/pull/5974	external
https://github.com/FasterXML/jackson-databind/sec…	external
https://access.redhat.com/security/cve/CVE-2026-59899	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507482	external
https://www.cve.org/CVERecord?id=CVE-2026-59899	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59899	external
https://github.com/netty/netty/security/advisorie…	external
https://netty.io/news/2026/07/09/4-1-136-Final.html	external
https://access.redhat.com/security/cve/CVE-2026-65600	self
https://bugzilla.redhat.com/show_bug.cgi?id=2506097	external
https://www.cve.org/CVERecord?id=CVE-2026-65600	external
https://nvd.nist.gov/vuln/detail/CVE-2026-65600	external
https://github.com/traefik/traefik/pull/13466	external
https://github.com/traefik/traefik/security/advis…	external
https://www.vulncheck.com/advisories/traefik-befo…	external
https://access.redhat.com/security/cve/CVE-2026-65601	self
https://bugzilla.redhat.com/show_bug.cgi?id=2506094	external
https://www.cve.org/CVERecord?id=CVE-2026-65601	external
https://nvd.nist.gov/vuln/detail/CVE-2026-65601	external
https://github.com/traefik/traefik/commit/26c96a3…	external
https://github.com/traefik/traefik/security/advis…	external
https://www.vulncheck.com/advisories/traefik-befo…	external
https://access.redhat.com/security/cve/CVE-2026-67213	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508406	external
https://www.cve.org/CVERecord?id=CVE-2026-67213	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67213	external
https://github.com/ai/nanoid/commit/cb3626d0f3342…	external
https://github.com/ai/nanoid/releases/tag/5.1.6	external
https://www.vulncheck.com/advisories/nanoid-befor…	external
https://access.redhat.com/security/cve/CVE-2026-67214	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508411	external
https://www.cve.org/CVERecord?id=CVE-2026-67214	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67214	external
https://github.com/ai/nanoid/commit/6ccc67bbaba71…	external
https://github.com/ai/nanoid/releases/tag/5.1.16	external
https://www.vulncheck.com/advisories/nanoid-befor…	external
https://access.redhat.com/security/cve/CVE-2026-68494	self
https://bugzilla.redhat.com/show_bug.cgi?id=2511026	external
https://www.cve.org/CVERecord?id=CVE-2026-68494	external
https://nvd.nist.gov/vuln/detail/CVE-2026-68494	external
https://github.com/FasterXML/jackson-core/commit/…	external
https://github.com/FasterXML/jackson-core/commit/…	external
https://github.com/FasterXML/jackson-core/commit/…	external
https://github.com/FasterXML/jackson-core/pull/1611	external
https://github.com/FasterXML/jackson-core/securit…	external
https://github.com/advisories/GHSA-72hv-8253-57qq	external
https://www.cve.org/CVERecord?id=CVE-2026-18401	external
https://access.redhat.com/security/cve/CVE-2026-69152	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510722	external
https://www.cve.org/CVERecord?id=CVE-2026-69152	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69152	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/s…	external
https://access.redhat.com/security/cve/CVE-2026-69153	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510719	external
https://www.cve.org/CVERecord?id=CVE-2026-69153	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69153	external
https://github.com/postcss/postcss/commit/7beca13…	external
https://github.com/postcss/postcss/releases/tag/8.5.19	external
https://github.com/postcss/postcss/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-73086	self
https://bugzilla.redhat.com/show_bug.cgi?id=2514175	external
https://www.cve.org/CVERecord?id=CVE-2026-73086	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73086	external
https://github.com/ai/nanoid/commit/7087969281cab…	external
https://github.com/ai/nanoid/commit/821dfed7b5db7…	external
https://github.com/ai/nanoid/commit/b0036ed60dc9f…	external
https://github.com/ai/nanoid/releases/tag/3.3.12	external
https://github.com/ai/nanoid/releases/tag/5.1.11	external
https://github.com/ai/nanoid/security/advisories/…	external
https://access.redhat.com/security/cve/CVE-2026-73566	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515509	external
https://www.cve.org/CVERecord?id=CVE-2026-73566	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73566	external
https://github.com/isaacs/node-tar/commit/631ae59…	external
https://github.com/isaacs/node-tar/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-73646	self
https://bugzilla.redhat.com/show_bug.cgi?id=2517456	external
https://www.cve.org/CVERecord?id=CVE-2026-73646	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73646	external
https://github.com/postcss/postcss/commit/95663d3…	external
https://github.com/postcss/postcss/releases/tag/8.5.18	external
https://github.com/postcss/postcss/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-75838	self
https://bugzilla.redhat.com/show_bug.cgi?id=2517772	external
https://www.cve.org/CVERecord?id=CVE-2026-75838	external
https://nvd.nist.gov/vuln/detail/CVE-2026-75838	external
https://github.com/cure53/DOMPurify/security/advi…	external
https://www.vulncheck.com/advisories/dompurify-be…	external

JSON

To clipboard

Loading 3.3 MB of JSON…

CVE-2025-55163 (GCVE-0-2025-55163)

Vulnerability from cvelistv5 – Published: 2025-08-13 14:17 – Updated: 2025-11-04 21:13

Title

Netty MadeYouReset HTTP/2 DDoS Vulnerability

Summary

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit - which results in resource exhaustion and distributed denial of service. This issue has been patched in versions 4.1.124.Final and 4.2.4.Final.

Severity

8.2 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-08-13 14:37 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

GitHub_M mitre root Scorecard

References

3 references

URL	Tags
https://github.com/netty/netty/security/advisorie…	x_refsource_CONFIRM
https://www.kb.cert.org/vuls/id/767506
http://www.openwall.com/lists/oss-security/2025/08/16/1

Impacted products

1 product

Vendor	Product	Version
netty	netty	Affected: < 4.1.124.Final Affected: < 4.2.4.Final

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-55163",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-13T14:37:06.148395Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-13T14:37:20.727Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:13:02.288Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.kb.cert.org/vuls/id/767506"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/08/16/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "netty",
          "vendor": "netty",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 4.1.124.Final"
            },
            {
              "status": "affected",
              "version": "\u003c 4.2.4.Final"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit - which results in resource exhaustion and distributed denial of service. This issue has been patched in versions 4.1.124.Final and 4.2.4.Final."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-13T14:17:36.111Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4"
        }
      ],
      "source": {
        "advisory": "GHSA-prj3-ccx8-p6x4",
        "discovery": "UNKNOWN"
      },
      "title": "Netty MadeYouReset HTTP/2 DDoS Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-55163",
    "datePublished": "2025-08-13T14:17:36.111Z",
    "dateReserved": "2025-08-07T18:27:23.307Z",
    "dateUpdated": "2025-11-04T21:13:02.288Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-10050 (GCVE-0-2026-10050)

Vulnerability from cvelistv5 – Published: 2026-08-04 11:02 – Updated: 2026-08-04 12:46

Title

Digest authentication lossy encoding

Summary

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains characters that cannot be represented in ISO-8859-1, they are silently replaced by `?`. This happens with passwords that contain Chinese, Cyrillic or Greek characters, for example: `αβ123` converts to `??123`. An attacker can send a request with a digest `Authorization` header crafted with a password made of only `?` characters; the server would match any password of the same length that contains non-ISO-8859-1 characters. Recent HTTP Digest [RFC-7616](https://datatracker.ietf.org/doc/html/rfc7616) supports a `charset` parameters that defaults to UTF-8 that allows for correct encoding/decoding of passwords.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-04 12:45 UTC

CWE

Assigner

eclipse mitre root Scorecard

References

2 references

URL	Tags
https://github.com/jetty/jetty.project/security/a…
https://gitlab.eclipse.org/security/cve-assignmen…

Impacted products

3 products

Vendor	Product	Version
Eclipse Foundation	Eclipse Jetty - EE8	Affected: 12.0.0 , ≤ 12.0.35 (semver) Affected: 12.1.0 , ≤ 12.1.9 (semver)
Eclipse Foundation	Eclipse Jetty - EE9	Affected: 12.0.0 , ≤ 12.0.35 (semver) Affected: 12.1.0 , ≤ 12.1.9 (semver)
Eclipse Foundation	Eclipse Jetty	Affected: 9.4.0 , ≤ 9.4.62 (semver) Affected: 10.0.0 , ≤ 10.0.30 (semver) Affected: 11.0.0 , ≤ 11.0.30 (semver) Affected: 12.0.0 , ≤ 12.0.35 (semver) Affected: 12.1.0 , ≤ 12.1.9 (semver)

Credits

https://github.com/hrykx-zy

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-10050",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-04T12:45:13.270660Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-04T12:46:38.770Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/jetty/jetty.project/security/advisories/GHSA-2fvj-hgj9-j2gr"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageName": "org.eclipse.jetty.ee8:jetty-ee8-security",
          "product": "Eclipse Jetty - EE8",
          "vendor": "Eclipse Foundation",
          "versions": [
            {
              "lessThanOrEqual": "12.0.35",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "12.1.9",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "org.eclipse.jetty.ee9:jetty-ee9-security",
          "product": "Eclipse Jetty - EE9",
          "vendor": "Eclipse Foundation",
          "versions": [
            {
              "lessThanOrEqual": "12.0.35",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "12.1.9",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "org.eclipse.jetty:jetty-security",
          "product": "Eclipse Jetty",
          "vendor": "Eclipse Foundation",
          "versions": [
            {
              "lessThanOrEqual": "9.4.62",
              "status": "affected",
              "version": "9.4.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.0.30",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "11.0.30",
              "status": "affected",
              "version": "11.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "12.0.35",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "12.1.9",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "https://github.com/hrykx-zy"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes.\u003c/p\u003e\u003cp\u003eThis was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons.\u003c/p\u003e\u003cp\u003eIf the password contains characters that cannot be represented in ISO-8859-1, they are silently replaced by `?`. This happens with passwords that contain Chinese, Cyrillic or Greek characters, for example: `\u03b1\u03b2123` converts to `??123`.\u003c/p\u003e\u003cp\u003eAn attacker can send a request with a digest `Authorization` header crafted with a password made of only `?` characters; the server would match any password of the same length that contains non-ISO-8859-1 characters.\u003c/p\u003e\u003cp\u003eRecent HTTP Digest [RFC-7616](https://datatracker.ietf.org/doc/html/rfc7616) supports a `charset` parameters that defaults to UTF-8 that allows for correct encoding/decoding of passwords.\u003c/p\u003e"
            }
          ],
          "value": "In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes.\n\n\n\nThis was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons.\n\n\n\nIf the password contains characters that cannot be represented in ISO-8859-1, they are silently replaced by `?`. This happens with passwords that contain Chinese, Cyrillic or Greek characters, for example: `\u03b1\u03b2123` converts to `??123`.\n\n\n\nAn attacker can send a request with a digest `Authorization` header crafted with a password made of only `?` characters; the server would match any password of the same length that contains non-ISO-8859-1 characters.\n\n\n\nRecent HTTP Digest [RFC-7616](https://datatracker.ietf.org/doc/html/rfc7616) supports a `charset` parameters that defaults to UTF-8 that allows for correct encoding/decoding of passwords."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-173",
              "description": "CWE-173",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-303",
              "description": "CWE-303",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-04T11:02:40.503Z",
        "orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
        "shortName": "eclipse"
      },
      "references": [
        {
          "url": "https://github.com/jetty/jetty.project/security/advisories/GHSA-2fvj-hgj9-j2gr"
        },
        {
          "url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/120"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Digest authentication lossy encoding",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
    "assignerShortName": "eclipse",
    "cveId": "CVE-2026-10050",
    "datePublished": "2026-08-04T11:02:40.503Z",
    "dateReserved": "2026-05-29T07:26:26.368Z",
    "dateUpdated": "2026-08-04T12:46:38.770Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-10051 (GCVE-0-2026-10051)

Vulnerability from cvelistv5 – Published: 2026-07-14 08:44 – Updated: 2026-07-14 12:57

Summary

In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection. Subsequent request that do not have trailers report the trailers of the first request. Subsequent request that do have trailers report the union of trailers of the first request and the current request.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-14 12:57 UTC

CWE

CWE-200

Assigner

eclipse mitre root Scorecard

References

1 reference

URL	Tags
https://gitlab.eclipse.org/security/cve-assignmen…

Impacted products

1 product

Vendor	Product	Version
Eclipse Foundation	Eclipse Jetty	Affected: 12.0.0 , ≤ 12.0.35 (semver) Affected: 12.1.0 , ≤ 12.1.9 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-10051",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-14T12:57:36.570816Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-14T12:57:50.096Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Eclipse Jetty",
          "repo": "https://github.com/jetty/jetty.project",
          "vendor": "Eclipse Foundation",
          "versions": [
            {
              "lessThanOrEqual": "12.0.35",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "12.1.9",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection.\nSubsequent request that do not have trailers report the trailers of the first request.\nSubsequent request that do have trailers report the union of trailers of the first request and the current request."
            }
          ],
          "value": "In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection.\nSubsequent request that do not have trailers report the trailers of the first request.\nSubsequent request that do have trailers report the union of trailers of the first request and the current request."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-14T08:44:38.233Z",
        "orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
        "shortName": "eclipse"
      },
      "references": [
        {
          "url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/119"
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
    "assignerShortName": "eclipse",
    "cveId": "CVE-2026-10051",
    "datePublished": "2026-07-14T08:44:38.233Z",
    "dateReserved": "2026-05-29T07:28:48.617Z",
    "dateUpdated": "2026-07-14T12:57:50.096Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12143 (GCVE-0-2026-12143)

Vulnerability from cvelistv5 – Published: 2026-06-12 18:01 – Updated: 2026-09-11 12:08

Title

form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)

Summary

form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-12 19:04 UTC

CWE

CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')

Assigner

harborist redhat root Scorecard

References

65 references

URL	Tags
https://github.com/form-data/form-data/security/a…	vendor-advisory
https://github.com/form-data/form-data/commit/641…	patch
https://github.com/form-data/form-data/commit/be3…	patch
https://github.com/form-data/form-data/commit/c71…	patch
https://www.npmjs.com/package/form-data	product
https://cwe.mitre.org/data/definitions/93.html	technical-description
https://html.spec.whatwg.org/multipage/form-contr…	technical-description
https://access.redhat.com/security/cve/CVE-2026-12143	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2488480	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:59136	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48151	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34342	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57590	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66545	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66488	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60390	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60388	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60389	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60391	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36319	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36625	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56338	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66003	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59155	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59153	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41951	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36754	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41929	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41928	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50300	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63047	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44263	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57545	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60446	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44267	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57801	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60477	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48693	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54770	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48124	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62260	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33155	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33160	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33163	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33173	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33183	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56431	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56366	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57013	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41031	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42146	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43052	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41066	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63373	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63355	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59556	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59557	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59579	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59558	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59559	vendor-advisoryx_refsource_REDHAT

Impacted products

167 products

Vendor	Product	Version
form-data	form-data	Affected: 0 , < 2.5.6 (semver) Affected: 3.0.0 , < 3.0.5 (semver) Affected: 4.0.0 , < 4.0.6 (semver)
Red Hat	Cryostat 4 on RHEL 9	Unaffected: 4.2.0-13 , < * (rpm) cpe:/a:redhat:cryostat:4::el9
Red Hat	Red Hat AMQ Broker 7.13.6	cpe:/a:redhat:amq_broker:7.13
Red Hat	Red Hat AMQ Broker 7.14.1	cpe:/a:redhat:amq_broker:7.14
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:2.6.13-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Data Grid 8.6.2	cpe:/a:redhat:jboss_data_grid:8
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.1.2-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782840519 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839981 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839193 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782838753 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839279 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782840539 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782841925 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782844225 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839658 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782838476 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839996 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839494 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1787079364 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1787065052 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787264250 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259048 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1787079359 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787687062 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1787339249 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1787339248 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1787341780 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787339213 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Security 4.9	Unaffected: 1783357116 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	Unaffected: 1783357140 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Ansible Automation Platform 2.1	Unaffected: 1787047114 , < * (rpm) cpe:/a:redhat:ansible_portal:2.1
Red Hat	Red Hat Ansible Automation Platform 2.2	Unaffected: 1788943531 , < * (rpm) cpe:/a:redhat:ansible_portal:2.2::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1787219751 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1787218409 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Developer Hub 1.10	Unaffected: 1783448184 , < * (rpm) cpe:/a:redhat:rhdh:1.10::el9
Red Hat	Red Hat Developer Hub 1.9	Unaffected: 1784210921 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9
Red Hat	Red Hat Migration Toolkit 1.8	Unaffected: 1783690532 , < * (rpm) cpe:/a:redhat:rhmt:1.8::el8
Red Hat	Red Hat Migration Toolkit for Applications 8.1	Unaffected: 1785169013 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.1::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787347991 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250508 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251550 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611759 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251250 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250617 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1788318661 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1784724699 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1787080892 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1787736396 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1784713741 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1787014197 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1787590390 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1785230147 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1786607915 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1786586789 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705347 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706101 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705558 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705646 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706138 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705741 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705777 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705802 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705938 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706577 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706125 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706177 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706188 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706679 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706357 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706612 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706644 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706659 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706880 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786701839 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786701555 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702052 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702559 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702713 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702264 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702448 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702276 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702440 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702315 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786703071 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702563 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702636 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702623 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786703137 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702716 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702872 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702949 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702917 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786703143 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627460 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786626399 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628235 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627106 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629761 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627559 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786687918 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629478 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628142 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786631508 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628053 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627382 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627430 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629076 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627469 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786644072 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786688215 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628340 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628623 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786632256 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628935 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629548 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1785245777 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1784737150 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.30	Unaffected: 1787762793 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.30::el9
Red Hat	Red Hat OpenShift Service Mesh 2.6	Unaffected: 1781937133 , < * (rpm) cpe:/a:redhat:service_mesh:2.6::el8
Red Hat	Red Hat OpenShift Service Mesh 2.6	Unaffected: 1782287580 , < * (rpm) cpe:/a:redhat:service_mesh:2.6::el8
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782201894 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782201833 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782201696 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782201537 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782201851 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782201812 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782231869 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782201466 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1783750447 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1783751865 , < * (rpm) Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1784351966 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1783955846 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1784125838 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Satellite 6.18	Unaffected: 1788322243 , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1788260941 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Migration Toolkit for Applications 8	cpe:/a:redhat:migration_toolkit_applications:8
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	Node HealthCheck Operator	cpe:/a:redhat:workload_availability_nhc:0
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Service Mesh 3	cpe:/a:redhat:service_mesh:3
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat build of Apache Camel for Spring Boot 4	cpe:/a:redhat:camel_spring_boot:4
Red Hat	Red Hat build of Apache Camel - HawtIO 4	cpe:/a:redhat:apache_camel_hawtio:4
Red Hat	Red Hat build of Apicurio Registry 3	cpe:/a:redhat:apicurio_registry:3
Red Hat	Red Hat Build of Podman Desktop	cpe:/a:redhat:podman_desktop:1
Red Hat	Red Hat Build of Podman Desktop - Tech Preview	cpe:/a:redhat:podman_desktop:0
Red Hat	Red Hat Discovery 2	cpe:/a:redhat:discovery:2::el9
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat Fuse 7	cpe:/a:redhat:jboss_fuse:7
Red Hat	Red Hat Hardened Images	cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat JBoss Enterprise Application Platform 7	cpe:/a:redhat:jboss_enterprise_application_platform:7
Red Hat	Red Hat JBoss Enterprise Application Platform 8	cpe:/a:redhat:jboss_enterprise_application_platform:8
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack	cpe:/a:redhat:jbosseapxp
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Trusted Artifact Signer	cpe:/a:redhat:trusted_artifact_signer:1
Red Hat	Red Hat Trusted Profile Analyzer	cpe:/a:redhat:trusted_profile_analyzer:2

Credits

yueyueL (https://github.com/yueyueL) LJHarb (https://github.com/LJHarb) LJHarb (https://github.com/LJHarb)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-12143",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-12T19:04:40.604029Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-12T19:04:44.024Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cryostat/cryostat-openshift-console-plugin-rhel9",
            "product": "Cryostat 4 on RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.2.0-13",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7.13"
            ],
            "defaultStatus": "unaffected",
            "packageName": "form-data",
            "product": "Red Hat AMQ Broker 7.13.6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7.14"
            ],
            "defaultStatus": "unaffected",
            "packageName": "form-data",
            "product": "Red Hat AMQ Broker 7.14.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-platform-ui",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.6.13-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_data_grid:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "form-data",
            "product": "Red Hat Data Grid 8.6.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-podman-desktop",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.2-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840519",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839981",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839193",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838753",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839279",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840539",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782841925",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782844225",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839658",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838476",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839996",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839494",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787079364",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787065052",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787264250",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259048",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787079359",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787687062",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787339249",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787339248",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787341780",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787339213",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783357116",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783357140",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_portal:2.1"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/automation-portal",
            "product": "Red Hat Ansible Automation Platform 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787047114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_portal:2.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/bootc-automation-portal-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788943531",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/gateway-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787219751",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-27/gateway-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787218409",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783448184",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784210921",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-ui-rhel8",
            "product": "Red Hat Migration Toolkit 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783690532",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-ui-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785169013",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-dashboard-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787347991",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-automl-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251550",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611759",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-maas-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251250",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250617",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788318661",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784724699",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787080892",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787736396",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784713741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787014197",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787590390",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785230147",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786607915",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786586789",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705347",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706101",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705558",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705646",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706138",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705777",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705802",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705938",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706577",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706125",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706177",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706188",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706679",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706357",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706612",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706659",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706880",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786701839",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786701555",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702052",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702559",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702713",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702264",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702448",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702276",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702440",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702315",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786703071",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702563",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702636",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702623",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786703137",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702716",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702872",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702949",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702917",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786703143",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627460",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786626399",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628235",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627106",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629761",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627559",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786687918",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629478",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628142",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786631508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628053",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627382",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627430",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629076",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627469",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786644072",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786688215",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628340",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628623",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786632256",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628935",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629548",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/code-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785245777",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/dashboard-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784737150",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.30::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/code-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.30",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787762793",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781937133",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782287580",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201894",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201833",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201696",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201851",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782231869",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201466",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783750447",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783751865",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784353904",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784351966",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783955846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784125838",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-host-inventory-frontend-rhel9",
            "product": "Red Hat Satellite 6.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788322243",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-host-inventory-frontend-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788260941",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cryostat-openshift-console-plugin-npm",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "form-data",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mta/mta-ui-rhel8",
            "product": "Migration Toolkit for Applications 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "network-observability/network-observability-console-plugin-pf4-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "network-observability/network-observability-console-plugin-pf5-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "network-observability/network-observability-console-plugin-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-must-gather-rhel9",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-operator-bundle",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel9-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-remediation-console-rhel8",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-console-plugin-pf5-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-operator-bundle",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel9-operator",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp21/system",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp22/system",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/system-rhel7",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp2/system-rhel8",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp2/system-rhel9",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-hub",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "python3.11-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "python3x-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:camel_spring_boot:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "form-data",
            "product": "Red Hat build of Apache Camel for Spring Boot 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apache_camel_hawtio:4"
            ],
            "defaultStatus": "affected",
            "packageName": "form-data",
            "product": "Red Hat build of Apache Camel - HawtIO 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apicurio_registry:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "apicurio/apicurio-registry-ui-rhel8",
            "product": "Red Hat build of Apicurio Registry 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apicurio_registry:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "apicurio/apicurio-registry-ui-rhel9",
            "product": "Red Hat build of Apicurio Registry 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-podman-desktop.git",
            "product": "Red Hat Build of Podman Desktop",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
            "product": "Red Hat Build of Podman Desktop - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdesktop/rh-podman-desktop-ext-rhel-rhel10",
            "product": "Red Hat Build of Podman Desktop - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdesktop/rh-podman-desktop-ext-sandbox-rhel10",
            "product": "Red Hat Build of Podman Desktop - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:discovery:2::el9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "discovery/discovery-ui-rhel9",
            "product": "Red Hat Discovery 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "gjs",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "thunderbird",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "subscription-manager",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "cockpit-composer",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "dotnet5.0-build-reference-packages",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "dotnet8.0",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mozjs60",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "pcs",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "subscription-manager",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "thunderbird",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "gjs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "pcs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "thunderbird",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gaudi-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/disk-image-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_fuse:7"
            ],
            "defaultStatus": "unknown",
            "packageName": "form-data",
            "product": "Red Hat Fuse 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "dotnet8.0",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "yarnpkg",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_application_platform:7"
            ],
            "defaultStatus": "affected",
            "packageName": "form-data",
            "product": "Red Hat JBoss Enterprise Application Platform 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_application_platform:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "form-data",
            "product": "Red Hat JBoss Enterprise Application Platform 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jbosseapxp"
            ],
            "defaultStatus": "unaffected",
            "packageName": "form-data",
            "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel9",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-advisor-frontend-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-remediations-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vulnerability-frontend-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rhtas-console-ui-rhel9",
            "product": "Red Hat Trusted Artifact Signer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_profile_analyzer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
            "product": "Red Hat Trusted Profile Analyzer",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-12T18:01:30.362Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-93",
                "description": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T12:08:59.965Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-12143"
          },
          {
            "name": "RHBZ#2488480",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12143.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59136"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48151"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34342"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57590"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66545"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66488"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60390"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60388"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60389"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60391"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36319"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36625"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56338"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66003"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59155"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59153"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41951"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36754"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41929"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41928"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50300"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63047"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44263"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57545"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60446"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44267"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57801"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60477"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48693"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54770"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48124"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62260"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33155"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33160"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33163"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33173"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33183"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56431"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56366"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57013"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41031"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42146"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43052"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41066"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63373"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63355"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59556"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59557"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59579"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59558"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59559"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:59136: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48151: Cryostat 4 on RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57590: Red Hat Enterprise Linux Extensions Channel (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66545: Red Hat AMQ Broker 7.13.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66488: Red Hat AMQ Broker 7.14.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60390: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60388: Red Hat Advanced Cluster Management for Kubernetes 2.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60389: Red Hat Advanced Cluster Management for Kubernetes 2.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60391: Red Hat Advanced Cluster Management for Kubernetes 2.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56338: Red Hat Ansible Automation Platform 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66003: Red Hat Ansible Automation Platform 2.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59155: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59153: Red Hat Ansible Automation Platform 2.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41951: Red Hat Data Grid 8.6.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41929: Red Hat Developer Hub 1.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63047: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44263: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57545: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60446: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44267: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57801: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60477: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48693: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54770: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48124: Red Hat OpenShift Dev Spaces 3.29"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62260: Red Hat OpenShift Dev Spaces 3.30"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56366: Red Hat Openshift Data Foundation 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57013: Red Hat Openshift Data Foundation 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41031: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42146: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43052: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42796: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41066: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40262: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63373: Red Hat Satellite 6.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63355: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59556: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59557: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59579: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59558: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59559: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-12T19:00:57.360Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-12T18:01:30.362Z",
            "value": "Made public."
          }
        ],
        "title": "form-data: form-data: Form field override via CRLF injection",
        "workarounds": [
          {
            "lang": "en",
            "value": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://www.npmjs.com/package/form-data",
          "defaultStatus": "unaffected",
          "packageName": "form-data",
          "product": "form-data",
          "programFiles": [
            "lib/form_data.js"
          ],
          "repo": "https://github.com/form-data/form-data",
          "vendor": "form-data",
          "versions": [
            {
              "lessThan": "2.5.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.0.5",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "4.0.6",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "yueyueL (https://github.com/yueyueL)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "LJHarb (https://github.com/LJHarb)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "LJHarb (https://github.com/LJHarb)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eform-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `\"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6.\u003c/p\u003e"
            }
          ],
          "value": "form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `\"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "Application uses attacker-controlled input as a multipart field name or filename and forwards the generated request to a trusted backend."
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-93",
              "description": "CWE-93: Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-12T18:01:30.362Z",
        "orgId": "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
        "shortName": "harborist"
      },
      "references": [
        {
          "name": "GHSA-hmw2-7cc7-3qxx",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
        },
        {
          "name": "Fix commit (4.0.6)",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
        },
        {
          "name": "Fix commit (3.0.5)",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
        },
        {
          "name": "Fix commit (2.5.6)",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
        },
        {
          "name": "npm: form-data",
          "tags": [
            "product"
          ],
          "url": "https://www.npmjs.com/package/form-data"
        },
        {
          "name": "CWE-93",
          "tags": [
            "technical-description"
          ],
          "url": "https://cwe.mitre.org/data/definitions/93.html"
        },
        {
          "name": "WHATWG HTML: multipart/form-data encoding algorithm",
          "tags": [
            "technical-description"
          ],
          "url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
        }
      ],
      "title": "form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
    "assignerShortName": "harborist",
    "cveId": "CVE-2026-12143",
    "datePublished": "2026-06-12T18:01:30.362Z",
    "dateReserved": "2026-06-12T17:33:29.185Z",
    "dateUpdated": "2026-09-11T12:08:59.965Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12151 (GCVE-0-2026-12151)

Vulnerability from cvelistv5 – Published: 2026-06-17 16:05 – Updated: 2026-09-11 12:08

Title

undici WebSocket client vulnerable to denial of service via fragment count bypass

Summary

Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments. A malicious WebSocket server can stream many small or empty continuation frames that each pass per-frame and cumulative-size validation, collectively causing unbounded memory growth in the client process. The result is memory exhaustion and a denial of service. Affected applications are those using the undici WebSocket client (new WebSocket(...)) or the WebSocketStream API that can be induced to connect to an attacker-controlled or compromised WebSocket endpoint. All releases starting at undici 6.17.0 are affected. Patches: Upgrade to undici >= 6.26.0, >= 7.28.0, or >= 8.5.0. Workarounds: No workaround is available. The fix must be applied through an upgrade.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-17 17:29 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

openjs redhat root Scorecard

References

31 references

URL	Tags
https://github.com/nodejs/undici/security/advisor…
https://cna.openjsf.org/security-advisories.html
https://access.redhat.com/security/cve/CVE-2026-12151	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2489980	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:48151	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39246	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35842	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35841	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41947	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39868	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:52399	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35892	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35891	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34342	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66545	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66488	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36754	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41929	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:38236	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:38009	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65126	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36621	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47728	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48124	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36820	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62260	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56431	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56366	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57013	vendor-advisoryx_refsource_REDHAT

Impacted products

107 products

Vendor	Product	Version
undici	undici	Affected: 0 , < 6.26.0 (semver) Unaffected: 6.26.0 (semver) Affected: 7.0.0 , < 7.28.0 (semver) Unaffected: 7.28.0 (semver) Affected: 8.0.0 , < 8.5.0 (semver) Unaffected: 8.5.0 (semver)
Red Hat	Cryostat 4 on RHEL 9	Unaffected: 4.2.0-13 , < * (rpm) cpe:/a:redhat:cryostat:4::el9
Red Hat	Red Hat AMQ Broker 7.13.6	cpe:/a:redhat:amq_broker:7.13
Red Hat	Red Hat AMQ Broker 7.14.1	cpe:/a:redhat:amq_broker:7.14
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 1:24.18.0-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 1:22.23.1-2.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 1:22.23.1-2.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260630152626.6d880403 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260703140402.6d880403 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 9080020260626074955.rhel9 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 9080020260626075442.rhel9 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 9060020260804140259.rhel9 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782840519 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839981 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839193 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782838753 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839279 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782840539 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782841925 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782844225 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839658 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782838476 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839996 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839494 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Red Hat Developer Hub 1.10	Unaffected: 1783448184 , < * (rpm) cpe:/a:redhat:rhdh:1.10::el9
Red Hat	Red Hat Developer Hub 1.9	Unaffected: 1784210921 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9
Red Hat	Red Hat Hardened Images	Unaffected: 26.5.0-1.3.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 24.18.0-0.3.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787801527 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787121387 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 1783306396 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1784744859 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705347 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706101 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705558 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705646 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706138 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705741 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705777 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705802 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705938 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706577 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706125 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706177 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706188 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706679 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706357 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706612 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706644 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706659 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706880 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786701839 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786701555 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702052 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702559 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702713 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702264 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702448 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702276 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702440 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702315 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786703071 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702563 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702636 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702623 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786703137 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702716 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702872 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702949 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702917 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786703143 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627460 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786626399 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628235 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627106 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629761 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627559 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786687918 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629478 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628142 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786631508 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628053 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627382 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627430 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629076 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627469 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786644072 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786688215 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628340 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628623 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786632256 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628935 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629548 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1782498792 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1783007534 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1782989367 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1785245777 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.30	Unaffected: 1787760821 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.30::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.30	Unaffected: 1787759145 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.30::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.30	Unaffected: 1787759723 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.30::el9
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	Red Hat Build of Podman Desktop	cpe:/a:redhat:podman_desktop:1
Red Hat	Red Hat Hardened Images	cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Self-service automation portal 2	cpe:/a:redhat:ansible_portal:2

Credits

lpinca Nadav0077 UlisesGascon

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-12151",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T17:29:57.305732Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-17T17:30:13.782Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cryostat/cryostat-grafana-dashboard-rhel9",
            "product": "Cryostat 4 on RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.2.0-13",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7.13"
            ],
            "defaultStatus": "unaffected",
            "packageName": "undici",
            "product": "Red Hat AMQ Broker 7.13.6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7.14"
            ],
            "defaultStatus": "unaffected",
            "packageName": "undici",
            "product": "Red Hat AMQ Broker 7.14.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "nodejs24",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:24.18.0-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "nodejs22",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:22.23.1-2.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "nodejs22",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:22.23.1-2.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "nodejs:24",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260630152626.6d880403",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "nodejs:22",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260703140402.6d880403",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "nodejs:24",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9080020260626074955.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "nodejs:22",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9080020260626075442.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "nodejs:22",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9060020260804140259.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840519",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839981",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839193",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838753",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839279",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840539",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782841925",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782844225",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839658",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838476",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839996",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839494",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783448184",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784210921",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "nodejs26-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "26.5.0-1.3.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "nodejs24-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "24.18.0-0.3.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787801527",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787121387",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783306396",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784744859",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705347",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706101",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705558",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705646",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706138",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705777",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705802",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705938",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706577",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706125",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706177",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706188",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706679",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706357",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706612",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706659",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706880",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786701839",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786701555",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702052",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702559",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702713",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702264",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702448",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702276",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702440",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702315",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786703071",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702563",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702636",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702623",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786703137",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702716",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702872",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702949",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702917",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786703143",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627460",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786626399",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628235",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627106",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629761",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627559",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786687918",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629478",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628142",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786631508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628053",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627382",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627430",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629076",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627469",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786644072",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786688215",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628340",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628623",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786632256",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628935",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629548",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/dashboard-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782498792",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/openvsx-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783007534",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/pluginregistry-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782989367",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/code-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785245777",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.30::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/dashboard-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.30",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787760821",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.30::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/openvsx-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.30",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787759145",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.30::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/pluginregistry-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.30",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787759723",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cryostat-openshift-console-plugin-npm",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "undici",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-console-plugin-pf5-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-podman-desktop.git",
            "product": "Red Hat Build of Podman Desktop",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "nodejs25",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rust",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-dashboard-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-automl-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-maas-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_portal:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/automation-portal",
            "product": "Self-service automation portal 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_portal:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/bootc-automation-portal-rhel9",
            "product": "Self-service automation portal 2",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-17T16:05:38.785Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T12:08:59.030Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-12151"
          },
          {
            "name": "RHBZ#2489980",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489980"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12151.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48151"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39246"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35842"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35841"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41947"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39868"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:52399"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35892"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35891"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34342"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66545"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66488"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36754"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41929"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:38236"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:38009"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65126"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36621"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47728"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48124"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36820"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62260"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56431"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56366"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57013"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:48151: Cryostat 4 on RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39246: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35842: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35841: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41947: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39868: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:52399: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35892: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35891: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66545: Red Hat AMQ Broker 7.13.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66488: Red Hat AMQ Broker 7.14.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41929: Red Hat Developer Hub 1.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:38236: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:38009: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36621: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47728: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48124: Red Hat OpenShift Dev Spaces 3.29"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62260: Red Hat OpenShift Dev Spaces 3.30"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56366: Red Hat Openshift Data Foundation 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57013: Red Hat Openshift Data Foundation 4.20"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-17T17:01:45.297Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-17T16:05:38.785Z",
            "value": "Made public."
          }
        ],
        "title": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/undici",
          "product": "undici",
          "vendor": "undici",
          "versions": [
            {
              "lessThan": "6.26.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "6.26.0",
              "versionType": "semver"
            },
            {
              "lessThan": "7.28.0",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "7.28.0",
              "versionType": "semver"
            },
            {
              "lessThan": "8.5.0",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "8.5.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "lpinca"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Nadav0077"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "UlisesGascon"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Impact:\nThe undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments. A malicious WebSocket server can stream many small or empty continuation frames that each pass per-frame and cumulative-size validation, collectively causing unbounded memory growth in the client process. The result is memory exhaustion and a denial of service.\n\nAffected applications are those using the undici WebSocket client (new WebSocket(...)) or the WebSocketStream API that can be induced to connect to an attacker-controlled or compromised WebSocket endpoint.\n\nAll releases starting at undici 6.17.0 are affected.\n\nPatches:\u0026nbsp;Upgrade to undici \u0026gt;= 6.26.0, \u0026gt;= 7.28.0, or \u0026gt;= 8.5.0.\u0026nbsp;Workarounds:\nNo workaround is available. The fix must be applied through an upgrade."
            }
          ],
          "value": "Impact:\nThe undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments. A malicious WebSocket server can stream many small or empty continuation frames that each pass per-frame and cumulative-size validation, collectively causing unbounded memory growth in the client process. The result is memory exhaustion and a denial of service.\n\nAffected applications are those using the undici WebSocket client (new WebSocket(...)) or the WebSocketStream API that can be induced to connect to an attacker-controlled or compromised WebSocket endpoint.\n\nAll releases starting at undici 6.17.0 are affected.\n\nPatches:\u00a0Upgrade to undici \u003e= 6.26.0, \u003e= 7.28.0, or \u003e= 8.5.0.\u00a0Workarounds:\nNo workaround is available. The fix must be applied through an upgrade."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T16:05:38.785Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "undici WebSocket client vulnerable to denial of service via fragment count bypass",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-12151",
    "datePublished": "2026-06-17T16:05:38.785Z",
    "dateReserved": "2026-06-12T18:14:04.454Z",
    "dateUpdated": "2026-09-11T12:08:59.030Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-13149 (GCVE-0-2026-13149)

Vulnerability from cvelistv5 – Published: 2026-06-30 08:30 – Updated: 2026-07-08 11:38

Summary

brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work.

Severity

7.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-30 12:43 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-407 - Inefficient Algorithmic Complexity

Assigner

seal mitre root Scorecard

References

2 references

URL	Tags
https://github.com/juliangruber/brace-expansion/c…
https://www.npmjs.com/package/brace-expansion

Impacted products

1 product

Vendor	Product	Version
juliangruber	brace-expansion	Affected: 0 , ≤ 5.0.6 (semver)

Credits

bnbdr

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-13149",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-30T12:43:12.568372Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-30T12:43:23.029Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://registry.npmjs.org",
          "defaultStatus": "unaffected",
          "packageName": "brace-expansion",
          "product": "brace-expansion",
          "repo": "https://github.com/juliangruber/brace-expansion",
          "vendor": "juliangruber",
          "versions": [
            {
              "lessThanOrEqual": "5.0.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "bnbdr"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding \u0027{}\u0027 brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work."
            }
          ],
          "value": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding \u0027{}\u0027 brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-469",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-469 HTTP DoS"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "YES",
            "Recovery": "USER",
            "Safety": "NEGLIGIBLE",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "PROOF_OF_CONCEPT",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400 Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-407",
              "description": "CWE-407 Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T11:38:35.974Z",
        "orgId": "22e2d327-25fe-45d7-9f0c-dcd23b7108df",
        "shortName": "seal"
      },
      "references": [
        {
          "url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
        },
        {
          "url": "https://www.npmjs.com/package/brace-expansion"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "22e2d327-25fe-45d7-9f0c-dcd23b7108df",
    "assignerShortName": "seal",
    "cveId": "CVE-2026-13149",
    "datePublished": "2026-06-30T08:30:34.502Z",
    "dateReserved": "2026-06-24T10:17:07.027Z",
    "dateUpdated": "2026-07-08T11:38:35.974Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-15075 (GCVE-0-2026-15075)

Vulnerability from cvelistv5 – Published: 2026-07-14 08:15 – Updated: 2026-07-14 12:18

Summary

In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler (vertx-core) propagates all request headers as-is across cross-origin HTTP 30x redirects. Only Content-Length is stripped; no origin comparison (scheme, host, port) is performed before copying headers to the redirect target. As a result, credential headers, including Authorization, Cookie, Proxy-Authorization, and arbitrary custom headers such as X-API-Token, are forwarded to the redirect destination without the caller's knowledge. An attacker who can cause a Vert.x HttpClient to issue a request that is redirected to an attacker-controlled host (for example, by supplying a URL to a webhook dispatcher, image proxy, or microservice URL fetcher) can capture bearer tokens, basic-auth credentials, session cookies, and API keys attached to the original request.

Severity

8.2 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-14 12:18 UTC

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
CWE-346 - Origin Validation Error

Assigner

eclipse mitre root Scorecard

References

1 reference

URL	Tags
https://gitlab.eclipse.org/security/cve-assignmen…

Impacted products

1 product

Vendor	Product	Version
Eclipse Foundation	Eclipse Vert.x	Affected: 4.0.0 , ≤ 4.5.29 (semver) Affected: 5.0.0 , ≤ 5.1.4 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-15075",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-14T12:18:43.429169Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-14T12:18:54.815Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Eclipse Vert.x",
          "repo": "https://github.com/eclipse-vertx/vert.x",
          "vendor": "Eclipse Foundation",
          "versions": [
            {
              "lessThanOrEqual": "4.5.29",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.1.4",
              "status": "affected",
              "version": "5.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), \u003ccode\u003eDefaultRedirectHandler\u003c/code\u003e (vertx-core) propagates all request headers as-is across cross-origin HTTP 30x redirects. Only \u003ccode\u003eContent-Length\u003c/code\u003e is stripped; no origin comparison (scheme, host, port) is performed before copying headers to the redirect target.\nAs a result, credential headers, including \u003ccode\u003eAuthorization\u003c/code\u003e, \u003ccode\u003eCookie\u003c/code\u003e, \u003ccode\u003eProxy-Authorization\u003c/code\u003e, and arbitrary custom headers such as \u003ccode\u003eX-API-Token\u003c/code\u003e, are forwarded to the redirect destination without the caller\u0027s knowledge.\u003c/p\u003e\n\u003cp\u003eAn attacker who can cause a Vert.x \u003ccode\u003eHttpClient\u003c/code\u003e to issue a request that is redirected to an attacker-controlled host (for example, by supplying a URL to a webhook dispatcher, image proxy, or microservice URL fetcher) can capture bearer tokens, basic-auth credentials, session cookies, and API keys attached to the original request.\u003c/p\u003e"
            }
          ],
          "value": "In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler (vertx-core) propagates all request headers as-is across cross-origin HTTP 30x redirects. Only Content-Length is stripped; no origin comparison (scheme, host, port) is performed before copying headers to the redirect target.\nAs a result, credential headers, including Authorization, Cookie, Proxy-Authorization, and arbitrary custom headers such as X-API-Token, are forwarded to the redirect destination without the caller\u0027s knowledge.\n\n\n\n\nAn attacker who can cause a Vert.x HttpClient to issue a request that is redirected to an attacker-controlled host (for example, by supplying a URL to a webhook dispatcher, image proxy, or microservice URL fetcher) can capture bearer tokens, basic-auth credentials, session cookies, and API keys attached to the original request."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-60",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-60: HTTP Response Smuggling"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-346",
              "description": "CWE-346: Origin Validation Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-14T08:15:53.650Z",
        "orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
        "shortName": "eclipse"
      },
      "references": [
        {
          "url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/161"
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
    "assignerShortName": "eclipse",
    "cveId": "CVE-2026-15075",
    "datePublished": "2026-07-14T08:15:53.650Z",
    "dateReserved": "2026-07-08T15:22:44.892Z",
    "dateUpdated": "2026-07-14T12:18:54.815Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-15076 (GCVE-0-2026-15076)

Vulnerability from cvelistv5 – Published: 2026-07-14 08:09 – Updated: 2026-07-14 12:20

Summary

In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession component of Eclipse Vert.x Web Client does not validate that the Domain attribute of a Set-Cookie response header matches the originating server's domain, in violation of RFC 6265 section 5.3. An attacker who controls any server that the victim application contacts can inject a cookie scoped to an arbitrary third-party domain; because the session store performs no cross-domain ownership check, it stores and later transmits that cookie to the targeted domain. When the victim application subsequently sends a request to the targeted domain using the same WebClientSession, it presents the attacker-injected cookie, causing the receiving service to process the request under the attacker's account. Sensitive data included in the victim application's requests, such as payment amounts, card details, or other API payloads, may then be accessible to the attacker through their own account on that service.

Severity

8.2 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-14 12:20 UTC

CWE

CWE-346 - Origin Validation Error

Assigner

eclipse mitre root Scorecard

References

1 reference

URL	Tags
https://gitlab.eclipse.org/security/cve-assignmen…

Impacted products

1 product

Vendor	Product	Version
Eclipse Foundation	Eclipse Vert.x	Affected: 4.0.0 , ≤ 4.5.29 (semver) Affected: 5.0.0 , ≤ 5.1.4 (semver)

Credits

Julien Viet

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-15076",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-14T12:20:15.334764Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-14T12:20:29.616Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Eclipse Vert.x",
          "repo": "https://github.com/vert-x3/vertx-web",
          "vendor": "Eclipse Foundation",
          "versions": [
            {
              "lessThanOrEqual": "4.5.29",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.1.4",
              "status": "affected",
              "version": "5.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Julien Viet"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the \u003ccode\u003eWebClientSession\u003c/code\u003e component of Eclipse Vert.x Web Client does not validate that the \u003ccode\u003eDomain\u003c/code\u003e attribute of a \u003ccode\u003eSet-Cookie\u003c/code\u003e response header matches the originating server\u0027s domain, in violation of RFC 6265 section 5.3.\nAn attacker who controls any server that the victim application contacts can inject a cookie scoped to an arbitrary third-party domain; because the session store performs no cross-domain ownership check, it stores and later transmits that cookie to the targeted domain.\u003c/p\u003e\n\u003cp\u003eWhen the victim application subsequently sends a request to the targeted domain using the same \u003ccode\u003eWebClientSession\u003c/code\u003e, it presents the attacker-injected cookie, causing the receiving service to process the request under the attacker\u0027s account. Sensitive data included in the victim application\u0027s requests, such as payment amounts, card details, or other API payloads, may then be accessible to the attacker through their own account on that service.\u003c/p\u003e\n\n\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession component of Eclipse Vert.x Web Client does not validate that the Domain attribute of a Set-Cookie response header matches the originating server\u0027s domain, in violation of RFC 6265 section 5.3.\nAn attacker who controls any server that the victim application contacts can inject a cookie scoped to an arbitrary third-party domain; because the session store performs no cross-domain ownership check, it stores and later transmits that cookie to the targeted domain.\n\n\n\n\nWhen the victim application subsequently sends a request to the targeted domain using the same WebClientSession, it presents the attacker-injected cookie, causing the receiving service to process the request under the attacker\u0027s account. Sensitive data included in the victim application\u0027s requests, such as payment amounts, card details, or other API payloads, may then be accessible to the attacker through their own account on that service."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-61",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-61: Session Fixation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-346",
              "description": "CWE-346: Origin Validation Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-14T08:09:12.951Z",
        "orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
        "shortName": "eclipse"
      },
      "references": [
        {
          "url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/162"
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
    "assignerShortName": "eclipse",
    "cveId": "CVE-2026-15076",
    "datePublished": "2026-07-14T08:09:12.951Z",
    "dateReserved": "2026-07-08T15:26:03.652Z",
    "dateUpdated": "2026-07-14T12:20:29.616Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-27136 (GCVE-0-2026-27136)

Vulnerability from cvelistv5 – Published: 2026-05-22 15:01 – Updated: 2026-05-22 16:59

Title

Invoking duplicate attributes can cause XSS in golang.org/x/net/html

Summary

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-22 16:59 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Go Google root Scorecard

References

4 references

URL	Tags
https://go.dev/issue/79575
https://groups.google.com/g/golang-announce/c/iI-…
https://go.dev/cl/781685
https://pkg.go.dev/vuln/GO-2026-5030

Impacted products

1 product

Vendor	Product	Version
golang.org/x/net	golang.org/x/net/html	Affected: 0 , < 0.55.0 (semver)

Credits

ensy

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-27136",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T16:59:35.355098Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T16:59:52.807Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/html",
          "product": "golang.org/x/net/html",
          "programRoutines": [
            {
              "name": "parser.parse"
            },
            {
              "name": "Parse"
            },
            {
              "name": "ParseFragment"
            },
            {
              "name": "ParseFragmentWithOptions"
            },
            {
              "name": "ParseWithOptions"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.55.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ensy"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T15:01:22.111Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79575"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "url": "https://go.dev/cl/781685"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "title": "Invoking  duplicate attributes can cause XSS in golang.org/x/net/html"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-27136",
    "datePublished": "2026-05-22T15:01:22.111Z",
    "dateReserved": "2026-02-17T19:57:28.434Z",
    "dateUpdated": "2026-05-22T16:59:52.807Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-34986 (GCVE-0-2026-34986)

Vulnerability from cvelistv5 – Published: 2026-04-06 16:22 – Updated: 2026-09-18 12:04

Title

Go JOSE affect by a panic in JWE decryption

Summary

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-07 14:21 UTC

CWE

CWE-248 - Uncaught Exception
CWE-131 - Incorrect Calculation of Buffer Size

Assigner

GitHub_M mitre root Scorecard

References

150 references

URL	Tags
https://github.com/go-jose/go-jose/security/advis…	x_refsource_CONFIRM
https://pkg.go.dev/github.com/go-jose/go-jose/v4#…	x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2026-34986	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2455470	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:65906	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65838	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62548	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66385	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17789	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60452	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60444	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60449	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20569	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19719	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27856	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17040	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16696	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22937	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19135	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22450	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19017	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33722	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35833	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48790	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49944	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25252	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25248	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25250	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34192	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:32991	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34196	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34197	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19721	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20607	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19720	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26054	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17287	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20609	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10135	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19186	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23228	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19353	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22714	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19173	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26636	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57590	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34364	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47952	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26585	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22423	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22347	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23345	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51033	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29854	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26568	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25127	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11070	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11217	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:13791	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:13829	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41928	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24977	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62550	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60023	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34099	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17598	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57487	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27001	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17448	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57408	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27004	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20041	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27063	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48676	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21703	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17468	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25187	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44267	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21709	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23241	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27044	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20034	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54602	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17474	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34794	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25206	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10175	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36820	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62260	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20946	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24484	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21932	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21931	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11688	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:9448	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:8490	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:9453	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:8491	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:8493	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:9388	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:9385	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17550	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56431	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41941	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17547	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41944	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56366	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:12279	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:12277	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57013	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40984	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56968	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11916	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22840	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11856	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22629	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21017	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24853	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19375	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22465	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48085	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23361	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11996	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10125	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10130	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24475	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24482	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24479	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24477	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24471	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21769	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19108	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:12116	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19099	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46885	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28198	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17459	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17458	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11512	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17123	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22258	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17121	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22260	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30650	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:18584	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:18585	vendor-advisoryx_refsource_REDHAT

Impacted products

341 products

Vendor	Product	Version
go-jose	go-jose	Affected: >= 4.0.0, < 4.1.4 Affected: < 3.0.5
Red Hat	Cryostat 4 on RHEL 9	Unaffected: 4.2.0-13 , < * (rpm) cpe:/a:redhat:cryostat:4::el9
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 7:5.8.2-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.144.0-2.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:165.1-2.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:52.1-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.1.2-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 2:1.18.1-3.el10_0.1 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 6:5.4.0-15.el10_0.1 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.144.0-2.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 2:1.39.9-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:134.1-9.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260520103055.afee755d , < * (rpm) Unaffected: 8100020260701102925.afee755d , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:101.5-1.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 8080020260721142025.63b34585 , < * (rpm) cpe:/a:redhat:rhel_tus:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 8080020260721142025.63b34585 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 2:1.41.8-3.el9_7 , < * (rpm) Unaffected: 2:1.43.1-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 6:5.8.2-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.144.0-2.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:165.1-2.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:52.1-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 2:4.4.1-22.el9_2.11 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 2:1.11.4-0.1.el9_2.6 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 1:1.29.7-1.el9_2.5 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	Unaffected: 0:0.144.0-2.el9_4 , < * (rpm) cpe:/a:redhat:rhel_eus:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:101.3-4.el9_4.2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 2:1.33.15-1.el9_4.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 4:4.9.4-20.el9_4.3 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 2:1.14.6-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 5:5.4.0-20.el9_6.3 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:0.144.0-2.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 2:1.39.9-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 2:1.18.1-5.el9_6.1 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:132.2-8.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat OpenShift Container Platform 4.12	Unaffected: 0:1.25.5-36.rhaos4.12.git2e7f657.el8 , < * (rpm) cpe:/a:redhat:openshift:4.12::el8
Red Hat	Red Hat OpenShift Container Platform 4.13	Unaffected: 0:1.26.5-32.rhaos4.13.git1088e36.el8 , < * (rpm) cpe:/a:redhat:openshift:4.13::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:1.29.13-14.rhaos4.16.git84cfdc6.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:1.31.13-14.rhaos4.18.gitf2de9ac.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 0:1.32.13-11.rhaos4.19.git089e95c.el9 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 0:1.33.13-5.rhaos4.20.git7ebc848.el9 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 0:1.34.11-4.rhaos4.21.git358c4b4.el9 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Custom Metric Autoscaler 2.19	Unaffected: 1780101236 , < * (rpm) cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9
Red Hat	Custom Metric Autoscaler 2.19	Unaffected: 1780101226 , < * (rpm) cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9
Red Hat	Custom Metric Autoscaler 2.19	Unaffected: 1780101239 , < * (rpm) cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9
Red Hat	Custom Metric Autoscaler 2.19	Unaffected: 1779953535 , < * (rpm) cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9
Red Hat	Logging for Red Hat OpenShift 6	Unaffected: 1781192909 , < * (rpm) cpe:/a:redhat:logging:6.0::el9
Red Hat	Logging for Red Hat OpenShift 6.2	Unaffected: 1784747816 , < * (rpm) cpe:/a:redhat:logging:6.2::el9
Red Hat	Logging Subsystem for Red Hat OpenShift 6.4	Unaffected: 1782412815 , < * (rpm) cpe:/a:redhat:logging:6.4::el9
Red Hat	Logging Subsystem for Red Hat OpenShift 6.4	Unaffected: 1782392961 , < * (rpm) cpe:/a:redhat:logging:6.4::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1776351169 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1779135478 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1784849867 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1778892370 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1778507267 , < * (rpm) Unaffected: 1782204403 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el8
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1778507253 , < * (rpm) Unaffected: 1782204381 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el8
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1778476004 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el8
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1782203505 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el8
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1778476002 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.7	Unaffected: 1777360597 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1778288655 , < * (rpm) Unaffected: 1779910504 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el8
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1778503377 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1778503196 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1778503297 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1778288646 , < * (rpm) Unaffected: 1779910129 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1782158798 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1778464111 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el8
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1778464072 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	Multicluster Global Hub 1.3.4	Unaffected: 1779212259 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.3::el9
Red Hat	Multicluster Global Hub 1.4.5	Unaffected: 1779579439 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.4::el9
Red Hat	Multicluster Global Hub 1.6.5	Unaffected: 1780167118 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.6::el9
Red Hat	OpenShift API for Data Protection 1.3	Unaffected: 1785177359 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.3::el9
Red Hat	OpenShift API for Data Protection 1.4	Unaffected: 1779770049 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.4::el9
Red Hat	OpenShift API for Data Protection 1.4	Unaffected: 1779243793 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.4::el9
Red Hat	OpenShift API for Data Protection 1.5	Unaffected: 1779770057 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.5::el9
Red Hat	OpenShift API for Data Protection 1.5	Unaffected: 1779245274 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.5::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1780204322 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Security 4.8	Unaffected: 1777307791 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.8::el8
Red Hat	Red Hat Advanced Cluster Security 4.8	Unaffected: 1776727747 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.8::el8
Red Hat	Red Hat Advanced Cluster Security 4.9	Unaffected: 1777986630 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	Unaffected: 1777976489 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Migration Toolkit 1.8	Unaffected: 1783953372 , < * (rpm) cpe:/a:redhat:rhmt:1.8::el8
Red Hat	Red Hat multicluster global hub 1.5.3	Unaffected: 1778867753 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.5::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1780069381 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778696221 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778578758 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 1788162068 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1778711679 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1782185551 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1787545831 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1778152595 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1781612340 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1787008847 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1779253452 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1781528081 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1786759363 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1786769764 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1778139790 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1779775173 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1779776767 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1779777382 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1779778558 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1779775521 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1779776141 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1780992173 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1780991067 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1781095245 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1781196942 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1785288355 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1778004922 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1779258037 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1779264135 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1779263963 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1779256521 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1779260263 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1779265022 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1779775977 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1780402732 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1780402633 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1780984236 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1781023907 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1781129269 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1784343578 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1786572999 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1781010151 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1780943933 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1782879990 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778049594 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778049298 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778049745 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778049753 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778050558 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778049818 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778049878 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778049920 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778049945 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778060364 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778050037 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778050035 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778050048 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778050508 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778050119 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778050290 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778059723 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778050352 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.17	Unaffected: 1778050482 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778045210 , < * (rpm) Unaffected: 1783676191 , < * (rpm) Unaffected: 1786705347 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778044961 , < * (rpm) Unaffected: 1783929816 , < * (rpm) Unaffected: 1786706101 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778045359 , < * (rpm) Unaffected: 1784094353 , < * (rpm) Unaffected: 1786705558 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778045374 , < * (rpm) Unaffected: 1784093953 , < * (rpm) Unaffected: 1786705646 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778045891 , < * (rpm) Unaffected: 1784094943 , < * (rpm) Unaffected: 1786706138 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778045472 , < * (rpm) Unaffected: 1783676585 , < * (rpm) Unaffected: 1786705741 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778045534 , < * (rpm) Unaffected: 1783676649 , < * (rpm) Unaffected: 1786705777 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778045524 , < * (rpm) Unaffected: 1783676675 , < * (rpm) Unaffected: 1786705802 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778045587 , < * (rpm) Unaffected: 1784094299 , < * (rpm) Unaffected: 1786705938 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778046067 , < * (rpm) Unaffected: 1784094725 , < * (rpm) Unaffected: 1786706577 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778045627 , < * (rpm) Unaffected: 1783676820 , < * (rpm) Unaffected: 1786706125 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778045731 , < * (rpm) Unaffected: 1783676883 , < * (rpm) Unaffected: 1786706177 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778045700 , < * (rpm) Unaffected: 1783676894 , < * (rpm) Unaffected: 1786706188 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778046234 , < * (rpm) Unaffected: 1784095175 , < * (rpm) Unaffected: 1786706679 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778045792 , < * (rpm) Unaffected: 1783676977 , < * (rpm) Unaffected: 1786706357 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778045858 , < * (rpm) Unaffected: 1784093503 , < * (rpm) Unaffected: 1786706612 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778045945 , < * (rpm) Unaffected: 1783677297 , < * (rpm) Unaffected: 1786706644 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778045931 , < * (rpm) Unaffected: 1783677345 , < * (rpm) Unaffected: 1786706659 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1778046079 , < * (rpm) Unaffected: 1783677533 , < * (rpm) Unaffected: 1786706880 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776079019 , < * (rpm) Unaffected: 1783684360 , < * (rpm) Unaffected: 1786701839 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776706744 , < * (rpm) Unaffected: 1783684068 , < * (rpm) Unaffected: 1786701555 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707205 , < * (rpm) Unaffected: 1784054582 , < * (rpm) Unaffected: 1786702052 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707231 , < * (rpm) Unaffected: 1784054606 , < * (rpm) Unaffected: 1786702559 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707760 , < * (rpm) Unaffected: 1784055295 , < * (rpm) Unaffected: 1786702713 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707301 , < * (rpm) Unaffected: 1783684603 , < * (rpm) Unaffected: 1786702264 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776079295 , < * (rpm) Unaffected: 1783684668 , < * (rpm) Unaffected: 1786702448 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707362 , < * (rpm) Unaffected: 1783684667 , < * (rpm) Unaffected: 1786702276 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707418 , < * (rpm) Unaffected: 1784054873 , < * (rpm) Unaffected: 1786702440 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707377 , < * (rpm) Unaffected: 1783684707 , < * (rpm) Unaffected: 1786702315 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707947 , < * (rpm) Unaffected: 1784055589 , < * (rpm) Unaffected: 1786703071 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707456 , < * (rpm) Unaffected: 1783684779 , < * (rpm) Unaffected: 1786702563 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707526 , < * (rpm) Unaffected: 1783684831 , < * (rpm) Unaffected: 1786702636 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707526 , < * (rpm) Unaffected: 1783684839 , < * (rpm) Unaffected: 1786702623 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707945 , < * (rpm) Unaffected: 1784055533 , < * (rpm) Unaffected: 1786703137 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707569 , < * (rpm) Unaffected: 1784055558 , < * (rpm) Unaffected: 1786702716 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707724 , < * (rpm) Unaffected: 1784056134 , < * (rpm) Unaffected: 1786702872 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707763 , < * (rpm) Unaffected: 1783685128 , < * (rpm) Unaffected: 1786702949 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776707771 , < * (rpm) Unaffected: 1783685129 , < * (rpm) Unaffected: 1786702917 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1776079774 , < * (rpm) Unaffected: 1783685375 , < * (rpm) Unaffected: 1786703143 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1775822432 , < * (rpm) Unaffected: 1783667125 , < * (rpm) Unaffected: 1786627460 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776403457 , < * (rpm) Unaffected: 1783666755 , < * (rpm) Unaffected: 1786626399 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776403991 , < * (rpm) Unaffected: 1784054598 , < * (rpm) Unaffected: 1786628235 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776404009 , < * (rpm) Unaffected: 1784055387 , < * (rpm) Unaffected: 1786627106 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776404539 , < * (rpm) Unaffected: 1784055726 , < * (rpm) Unaffected: 1786629761 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776404060 , < * (rpm) Unaffected: 1783667517 , < * (rpm) Unaffected: 1786627559 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1775822689 , < * (rpm) Unaffected: 1783667577 , < * (rpm) Unaffected: 1786687918 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776404131 , < * (rpm) Unaffected: 1783667611 , < * (rpm) Unaffected: 1786629478 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776406225 , < * (rpm) Unaffected: 1784055020 , < * (rpm) Unaffected: 1786628142 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776406131 , < * (rpm) Unaffected: 1783667641 , < * (rpm) Unaffected: 1786631508 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776406770 , < * (rpm) Unaffected: 1784055586 , < * (rpm) Unaffected: 1786628053 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776406247 , < * (rpm) Unaffected: 1783667790 , < * (rpm) Unaffected: 1786627382 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776406286 , < * (rpm) Unaffected: 1783667859 , < * (rpm) Unaffected: 1786627430 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776406291 , < * (rpm) Unaffected: 1783667875 , < * (rpm) Unaffected: 1786629076 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776406284 , < * (rpm) Unaffected: 1783667869 , < * (rpm) Unaffected: 1786627469 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776406291 , < * (rpm) Unaffected: 1783667877 , < * (rpm) Unaffected: 1786644072 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776406771 , < * (rpm) Unaffected: 1784055576 , < * (rpm) Unaffected: 1786688215 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776406384 , < * (rpm) Unaffected: 1784055244 , < * (rpm) Unaffected: 1786628340 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776406540 , < * (rpm) Unaffected: 1784055382 , < * (rpm) Unaffected: 1786628623 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776406595 , < * (rpm) Unaffected: 1783668266 , < * (rpm) Unaffected: 1786632256 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1776406594 , < * (rpm) Unaffected: 1783668288 , < * (rpm) Unaffected: 1786628935 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1775823207 , < * (rpm) Unaffected: 1783669219 , < * (rpm) Unaffected: 1786629548 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786627281 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786627168 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786628067 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786628657 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786627792 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786698066 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786627823 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786628998 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786697443 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786628916 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786630412 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786629773 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786630739 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786628303 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786629324 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786628605 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786631438 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786697305 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786644678 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786634168 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786633448 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786634233 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786633986 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786633677 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.21	Unaffected: 1786644362 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.21::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932114 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782931768 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932104 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783536000 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783535989 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783536515 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932521 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783018461 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783018421 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932812 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537001 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932919 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537586 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932969 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933015 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933042 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537392 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933235 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933251 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537955 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933417 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537742 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933602 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783019377 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934054 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934036 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934284 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.27	Unaffected: 1776718585 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.27::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1782987430 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.30	Unaffected: 1787756367 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.30::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.30	Unaffected: 1787756799 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.30::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.30	Unaffected: 1787764814 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.30::el9
Red Hat	Red Hat OpenShift distributed tracing 3.9.3	Unaffected: 1776435643 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.9::el9
Red Hat	Red Hat OpenShift distributed tracing 3.9.3	Unaffected: 1776435613 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.9::el9
Red Hat	Red Hat OpenShift distributed tracing 3.9.3	Unaffected: 1776435680 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.9::el9
Red Hat	Red Hat OpenShift distributed tracing 3.9.3	Unaffected: 1776185379 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.9::el9
Red Hat	Red Hat OpenShift GitOps 1.18	Unaffected: 1779116359 , < * (rpm) cpe:/a:redhat:openshift_gitops:1.18::el8
Red Hat	Red Hat OpenShift Pipelines 1.2	Unaffected: 1779865001 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.20::el9
Red Hat	Red Hat OpenShift Pipelines 1.2	Unaffected: 1780044955 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.20::el9
Red Hat	Red Hat OpenShift Pipelines 1.21	Unaffected: cli-1.21.1 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.21::el9
Red Hat	Red Hat OpenShift Service Mesh 2.6	Unaffected: 1777374598 , < * (rpm) cpe:/a:redhat:service_mesh:2.6::el8
Red Hat	Red Hat OpenShift Service Mesh 2.6	Unaffected: 1777319850 , < * (rpm) cpe:/a:redhat:service_mesh:2.6::el8
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1776151270 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1776238635 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1776256858 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1776149682 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1776178280 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1776178059 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1776151277 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1776736910 , < * (rpm) Unaffected: 1779822261 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1776752646 , < * (rpm) Unaffected: 1779811412 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.14	Unaffected: 1779689392 , < * (rpm) cpe:/a:redhat:quay:3.14::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1780891395 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1779204086 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.17	Unaffected: 1779922205 , < * (rpm) cpe:/a:redhat:quay:3.17::el9
Red Hat	Red Hat Quay 3.18	Unaffected: 1784987273 , < * (rpm) cpe:/a:redhat:quay:3.18::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1776782369 , < * (rpm) Unaffected: 1779811473 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1776339099 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1776329867 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1780386299 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1780053572 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1780046753 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1780046765 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1780049214 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1780051354 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1780052587 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Assisted Installer for Red Hat OpenShift Container Platform 2	cpe:/a:redhat:assisted_installer:2
Red Hat	cert-manager Operator for Red Hat OpenShift	cpe:/a:redhat:cert_manager:1
Red Hat	Confidential Compute Attestation	cpe:/a:redhat:confidential_compute_attestation:1
Red Hat	External Secrets Operator for Red Hat OpenShift	cpe:/a:redhat:external_secrets_operator:1
Red Hat	Kernel Module Management Operator for Red Hat Openshift	cpe:/a:redhat:kernel_module_management:2
Red Hat	Logging Subsystem for Red Hat OpenShift	cpe:/a:redhat:logging:5
Red Hat	Logical Volume Manager Storage	cpe:/a:redhat:lvms:4
Red Hat	Migration Toolkit for Containers	cpe:/a:redhat:rhmt:1
Red Hat	Migration Toolkit for Virtualization	cpe:/a:redhat:migration_toolkit_virtualization:2
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Multicluster Global Hub	cpe:/a:redhat:multicluster_globalhub
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	Node HealthCheck Operator	cpe:/a:redhat:workload_availability_nhc:0
Red Hat	OpenShift Developer Tools and Services	cpe:/a:redhat:ocp_tools
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	OpenShift Service Mesh 2	cpe:/a:redhat:service_mesh:2
Red Hat	OpenShift Service Mesh 3	cpe:/a:redhat:service_mesh:3
Red Hat	Power monitoring for Red Hat OpenShift	cpe:/a:redhat:openshift_power_monitoring
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Build of Kueue	cpe:/a:redhat:kueue_operator:1
Red Hat	Red Hat Build of Podman Desktop	cpe:/a:redhat:podman_desktop:1
Red Hat	Red Hat Build of Podman Desktop - Tech Preview	cpe:/a:redhat:podman_desktop:0
Red Hat	Red Hat Connectivity Link 1	cpe:/a:redhat:connectivity_link:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Cluster Manager CLI	cpe:/a:redhat:openshift_cluster_manager_cli:1
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat Openshift Data Foundation 4	cpe:/a:redhat:openshift_data_foundation:4
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift for Windows Containers	cpe:/a:redhat:windows_machine_config
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1
Red Hat	Red Hat OpenShift on AWS	cpe:/a:redhat:openshift_service_on_aws:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenStack Platform 18.0	cpe:/a:redhat:openstack:18.0
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat Trusted Artifact Signer	cpe:/a:redhat:trusted_artifact_signer:1
Red Hat	Security Profiles Operator	cpe:/a:redhat:openshift_security_profiles_operator:1
Red Hat	Zero Trust Workload Identity Manager	cpe:/a:redhat:zero_trust_workload_identity_manager:1
Red Hat	Zero Trust Workload Identity Manager - Tech Preview	cpe:/a:redhat:zero_trust_workload_identity_manager:0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-34986",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-07T14:21:42.477191Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-07T14:21:54.041Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cryostat/cryostat-storage-rhel9",
            "product": "Cryostat 4 on RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.2.0-13",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "7:5.8.2-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.144.0-2.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:165.1-2.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-podman-desktop",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.2-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.18.1-3.el10_0.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "6:5.4.0-15.el10_0.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.144.0-2.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.39.9-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:134.1-9.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260520103055.afee755d",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260701102925.afee755d",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.5-1.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8080020260721142025.63b34585",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8080020260721142025.63b34585",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.41.8-3.el9_7",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.43.1-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "6:5.8.2-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.144.0-2.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:165.1-2.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:4.4.1-22.el9_2.11",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.11.4-0.1.el9_2.6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:1.29.7-1.el9_2.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.144.0-2.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.3-4.el9_4.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.33.15-1.el9_4.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4:4.9.4-20.el9_4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.14.6-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "5:5.4.0-20.el9_6.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.144.0-2.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.39.9-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.18.1-5.el9_6.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:132.2-8.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.5-36.rhaos4.12.git2e7f657.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.13::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-32.rhaos4.13.git1088e36.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.29.13-14.rhaos4.16.git84cfdc6.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.31.13-14.rhaos4.18.gitf2de9ac.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.32.13-11.rhaos4.19.git089e95c.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.33.13-5.rhaos4.20.git7ebc848.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.34.11-4.rhaos4.21.git358c4b4.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9",
            "product": "Custom Metric Autoscaler 2.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780101236",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9",
            "product": "Custom Metric Autoscaler 2.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780101226",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
            "product": "Custom Metric Autoscaler 2.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780101239",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator",
            "product": "Custom Metric Autoscaler 2.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779953535",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/lokistack-gateway-rhel9",
            "product": "Logging for Red Hat OpenShift 6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781192909",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/lokistack-gateway-rhel9",
            "product": "Logging for Red Hat OpenShift 6.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784747816",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/cluster-logging-rhel9-operator",
            "product": "Logging Subsystem for Red Hat OpenShift 6.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782412815",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/lokistack-gateway-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift 6.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782392961",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-agent-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776351169",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779135478",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/must-gather-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784849867",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778892370",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-controller-rhel8",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778507267",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782204403",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-rhel8",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778507253",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782204381",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-8-rhel8",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778476004",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-agent-rhel8",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782203505",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778476002",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-agent-rhel9",
            "product": "multicluster engine for Kubernetes 2.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777360597",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-8-rhel8",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778288655",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779910504",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-agent-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778503377",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778503196",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778503297",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778288646",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779910129",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/must-gather-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782158798",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-8-rhel8",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778464111",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778464072",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
            "product": "Multicluster Global Hub 1.3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779212259",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
            "product": "Multicluster Global Hub 1.4.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779579439",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
            "product": "Multicluster Global Hub 1.6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780167118",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-mustgather-rhel9",
            "product": "OpenShift API for Data Protection 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785177359",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-mustgather-rhel9",
            "product": "OpenShift API for Data Protection 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779770049",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-plugin-rhel9",
            "product": "OpenShift API for Data Protection 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779243793",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-mustgather-rhel9",
            "product": "OpenShift API for Data Protection 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779770057",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-plugin-rhel9",
            "product": "OpenShift API for Data Protection 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779245274",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/submariner-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780204322",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777307791",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777307791",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-scanner-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776727747",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-scanner-slim-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776727747",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777307791",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777986630",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777986630",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777986630",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777976489",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-controller-rhel8",
            "product": "Red Hat Migration Toolkit 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783953372",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
            "product": "Red Hat multicluster global hub 1.5.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778867753",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-controller-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780069381",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kube-auth-proxy-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778696221",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-controller-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778578758",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cloud-credential-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788162068",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-telemeter-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778711679",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-oauth-server-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782185551",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cloud-credential-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787545831",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-telemeter-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778152595",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-oauth-server-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781612340",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cloud-credential-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787008847",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-telemeter-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779253452",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-oauth-server-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781528081",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-azure-workload-identity-webhook-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786759363",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cloud-credential-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786769764",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-telemeter-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778139790",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cli-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779775173",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-olm-catalogd-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779776767",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-olm-operator-controller-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779777382",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-operator-framework-tools-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779778558",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-operator-lifecycle-manager-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779775521",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-operator-registry-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779776141",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cloud-credential-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780992173",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-kube-state-metrics-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780991067",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781095245",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/oc-mirror-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781196942",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-azure-workload-identity-webhook-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785288355",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-telemeter-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778004922",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779258037",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-olm-catalogd-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779264135",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-olm-operator-controller-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779263963",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-operator-framework-tools-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779256521",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-operator-lifecycle-manager-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779260263",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-operator-registry-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779265022",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cli-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779775977",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cloud-credential-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780402732",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-kube-state-metrics-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780402633",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/oc-mirror-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780984236",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-oauth-server-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781023907",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-installer-artifacts-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781129269",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-azure-workload-identity-webhook-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784343578",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ovn-kubernetes-microshift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786572999",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-installer-artifacts-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781010151",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-oauth-server-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780943933",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-node-agent-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782879990",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778049594",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778049298",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778049745",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778049753",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778050558",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778049818",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778049878",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778049920",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778049945",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778060364",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778050037",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778050035",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778050048",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778050508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778050119",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778050290",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778059723",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778050352",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778050482",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778045210",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783676191",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705347",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778044961",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783929816",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706101",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778045359",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784094353",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705558",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778045374",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784093953",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705646",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778045891",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784094943",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706138",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778045472",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783676585",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778045534",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783676649",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705777",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778045524",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783676675",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705802",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778045587",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784094299",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705938",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778046067",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784094725",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706577",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778045627",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783676820",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706125",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778045731",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783676883",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706177",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778045700",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783676894",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706188",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778046234",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784095175",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706679",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778045792",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783676977",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706357",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778045858",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784093503",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706612",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778045945",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783677297",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778045931",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783677345",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706659",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778046079",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783677533",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706880",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776079019",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783684360",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786701839",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776706744",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783684068",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786701555",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707205",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784054582",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702052",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707231",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784054606",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702559",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707760",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784055295",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702713",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707301",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783684603",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702264",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776079295",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783684668",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702448",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707362",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783684667",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702276",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707418",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784054873",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702440",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707377",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783684707",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702315",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707947",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784055589",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786703071",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707456",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783684779",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702563",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707526",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783684831",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702636",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707526",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783684839",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702623",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707945",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784055533",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786703137",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707569",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784055558",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702716",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707724",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784056134",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702872",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707763",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783685128",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702949",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776707771",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783685129",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702917",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776079774",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783685375",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786703143",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1775822432",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783667125",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627460",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776403457",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783666755",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786626399",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776403991",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784054598",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628235",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776404009",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784055387",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627106",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776404539",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784055726",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629761",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776404060",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783667517",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627559",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1775822689",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783667577",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786687918",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776404131",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783667611",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629478",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776406225",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784055020",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628142",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776406131",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783667641",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786631508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776406770",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784055586",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628053",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776406247",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783667790",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627382",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776406286",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783667859",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627430",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776406291",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783667875",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629076",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776406284",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783667869",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627469",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776406291",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783667877",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786644072",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776406771",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784055576",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786688215",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776406384",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784055244",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628340",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776406540",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784055382",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628623",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776406595",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783668266",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786632256",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776406594",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783668288",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628935",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1775823207",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783669219",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629548",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627281",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627168",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/devicefinder-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628067",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628657",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627792",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786698066",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627823",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628998",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786697443",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-blackbox-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628916",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786630412",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629773",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786630739",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628303",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629324",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628605",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786631438",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786697305",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-lightspeed-rag-content-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786644678",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786634168",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786633448",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786634233",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786633986",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786633677",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786644362",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782931768",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/devicefinder-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932104",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536000",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783535989",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536515",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932521",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018421",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-blackbox-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537001",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932919",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537586",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932969",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933015",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933042",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-drbd-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537392",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933235",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933251",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537955",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933417",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537742",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933602",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783019377",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-mover-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934054",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934284",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.27::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/traefik-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.27",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776718585",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/udi-base-rhel10",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782987430",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.30::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/oauth2-proxy-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.30",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787756367",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.30::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/traefik-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.30",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787756799",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.30::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/udi-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.30",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787764814",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-gateway-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.9.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776435643",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-query-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.9.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776435613",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.9.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776435680",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-collector-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.9.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776185379",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/dex-rhel8",
            "product": "Red Hat OpenShift GitOps 1.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779116359",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9",
            "product": "Red Hat OpenShift Pipelines 1.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779865001",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-operator-bundle",
            "product": "Red Hat OpenShift Pipelines 1.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780044955",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "serve-tkn-cli-1-21-serve-tkn",
            "product": "Red Hat OpenShift Pipelines 1.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "cli-1.21.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777374598",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/pilot-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777319850",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776151270",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776238635",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776256858",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776149682",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776178280",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776178059",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776151277",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776736910",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779822261",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776752646",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779811412",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.14::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779689392",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780891395",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779204086",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779922205",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784987273",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776782369",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779811473",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/client-server-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776339099",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/cosign-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776329867",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rhtas-console-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780386299",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/createtree-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780053572",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rekor-monitor-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780046753",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/fulcio-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780046765",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rekor-backfill-redis-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780049214",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rekor-server-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780049214",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/timestamp-authority-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780051354",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/trillian-database-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780053572",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/trillian-logserver-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780053572",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/trillian-logsigner-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780053572",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/fetch-tsa-certs-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780051354",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/gitsign-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780052587",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rekor-cli-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780049214",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/updatetree-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780053572",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "assisted/agent-preinstall-image-builder-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhai/assisted-installer-controller-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhai/assisted-installer-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/cert-manager-istio-csr-rhel9",
            "product": "cert-manager Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/cert-manager-operator-bundle",
            "product": "cert-manager Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/cert-manager-operator-rhel9",
            "product": "cert-manager Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-acmesolver-rhel9",
            "product": "cert-manager Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-rhel9",
            "product": "cert-manager Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-must-gather-rhel9",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "external-secrets-operator/bitwarden-sdk-server-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "external-secrets-operator/external-secrets-operator-bundle",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "external-secrets-operator/external-secrets-operator-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "external-secrets-operator/external-secrets-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:kernel_module_management:2"
            ],
            "defaultStatus": "affected",
            "packageName": "kmm/kernel-module-management-must-gather-rhel9",
            "product": "Kernel Module Management Operator for Red Hat Openshift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/cluster-logging-rhel9-operator",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/logging-loki-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/loki-operator-bundle",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/loki-rhel9-operator",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/lokistack-gateway-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/opa-openshift-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-must-gather-rhel9",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhmtc/openshift-migration-log-reader-rhel8",
            "product": "Migration Toolkit for Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhmtc/openshift-migration-must-gather-rhel8",
            "product": "Migration Toolkit for Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_virtualization:2"
            ],
            "defaultStatus": "affected",
            "packageName": "migration-toolkit-virtualization/mtv-must-gather-rhel8",
            "product": "Migration Toolkit for Virtualization",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_virtualization:2"
            ],
            "defaultStatus": "affected",
            "packageName": "mtv-candidate/mtv-must-gather-rhel8",
            "product": "Migration Toolkit for Virtualization",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-api-provider-aws-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hive-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hypershift-rhel9-operator",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/image-based-install-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "unaffected",
            "packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9",
            "product": "Multicluster Global Hub",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "network-observability/network-observability-cli-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "unaffected",
            "packageName": "workload-availability/node-healthcheck-must-gather-rhel9",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "ocp-tools-4/jenkins-agent-base-rhel9",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "ocp-tools-4/jenkins-rhel8",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "ocp-tools-4/jenkins-rhel9",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-jenkins",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-lightspeed/openshift-mcp-server-rhel9",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-cache-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-chains-controller-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-cli-tkn-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-controller-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-opc-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-results-api-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-results-watcher-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-rhel9-operator",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-sidecarlogresults-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-ekb-dispatcher-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-ekb-kafka-controller-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-ekb-receiver-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-eventing-apiserver-receive-adapter-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-eventing-channel-controller-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-eventing-channel-dispatcher-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-eventing-controller-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-eventing-filter-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-eventing-ingress-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-eventing-jobsink-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-eventing-mtchannel-broker-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-eventing-mtping-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-eventing-webhook-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/serverless-must-gather-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/istio-must-gather-rhel9",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/proxyv2-rhel9",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/istio-must-gather-rhel9",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-operator-bundle",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9-operator",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_power_monitoring"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-power-monitoring/power-monitoring-rhel9-operator",
            "product": "Power monitoring for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-multicluster-observability-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-must-gather-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/kube-rbac-proxy-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/kube-state-metrics-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/submariner-operator-bundle",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "advanced-cluster-security/rhacs-rhel8-operator",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-25/aap-must-gather-rhel8",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform-26/aap-must-gather-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-on-clouds/aoc-azure-aap-installer-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:kueue_operator:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kueue/kueue-must-gather-rhel9",
            "product": "Red Hat Build of Kueue",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:1"
            ],
            "defaultStatus": "affected",
            "packageName": "podman-desktop-macos-1-0",
            "product": "Red Hat Build of Podman Desktop",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:1"
            ],
            "defaultStatus": "affected",
            "packageName": "podman-desktop-windows-1-0",
            "product": "Red Hat Build of Podman Desktop",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdesktop/rh-podman-desktop-ext-bootc-rhel10",
            "product": "Red Hat Build of Podman Desktop - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdesktop/rh-podman-desktop-ext-rhel-rhel10",
            "product": "Red Hat Build of Podman Desktop - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:connectivity_link:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcl-1/authorino-rhel9",
            "product": "Red Hat Connectivity Link 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-cli-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-maas-api-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-must-gather-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/rhai-cli-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_cluster_manager_cli:1"
            ],
            "defaultStatus": "affected",
            "packageName": "ocm-cli-clients/ocm-cli-rhel9",
            "product": "Red Hat OpenShift Cluster Manager CLI",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-must-gather-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/cnf-tests-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/cnf-tests-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/kube-compare-artifacts-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/lifecycle-agent-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/network-tools-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/numaresources-must-gather-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-agent-installer-api-server-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-agent-installer-csr-approver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-agent-installer-orchestrator-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-aws-cluster-api-controllers-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-aws-pod-identity-webhook-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-baremetal-installer-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cli-artifacts-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-csi-driver-shared-resource-mustgather-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-deployer-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-docker-builder",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-docker-builder-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-helm-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-installer-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-local-storage-mustgather-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-machine-os-images-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-must-gather-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-ovn-kubernetes-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-secrets-store-csi-mustgather-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-tests-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-tools-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ptp-must-gather-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-kni/commatrix",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "redhat/redhat-operator-index",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "devspaces/udi-base-rhel9",
            "product": "Red Hat OpenShift Dev Spaces",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4-wincw/windows-machine-config-operator-bundle",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-agent-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel9",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/must-gather-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_service_on_aws:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rosa",
            "product": "Red Hat OpenShift on AWS",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-cdi-apiserver-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-cdi-cloner-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-cdi-controller-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-cdi-importer-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-cdi-operator-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-cdi-uploadproxy-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-cdi-uploadserver-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoso-operators/openstack-operator-bundle",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoso-operators/openstack-rhel9-operator",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoso-operators/prometheus-podman-exporter-rhel9",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/clair-rhel8",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "quay/clair-rhel9",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-builder-rhel8",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-builder-rhel9",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhtas/certificate-transparency-rhel9",
            "product": "Red Hat Trusted Artifact Signer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/ec-rhel9",
            "product": "Red Hat Trusted Artifact Signer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhtas/model-transparency-cli-rhel9",
            "product": "Red Hat Trusted Artifact Signer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/policy-controller-rhel9",
            "product": "Red Hat Trusted Artifact Signer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/policy-controller-rhel9-operator",
            "product": "Red Hat Trusted Artifact Signer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-security-profiles-operator-bundle",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-security-profiles-rhel8-operator",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-controller-manager-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-server-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-server-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-04-06T16:22:45.353Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-131",
                "description": "Incorrect Calculation of Buffer Size",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-18T12:04:40.279Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-34986"
          },
          {
            "name": "RHBZ#2455470",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65906"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65838"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62548"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66385"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17789"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60452"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60444"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60449"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20569"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19719"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27856"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17040"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:16696"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22937"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19135"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22450"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19017"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33722"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35833"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48790"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49944"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25252"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25248"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25250"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34192"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:32991"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34196"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34197"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19721"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20607"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19720"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26054"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17287"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20609"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10135"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19186"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23228"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19353"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22714"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19173"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26636"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57590"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34364"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47952"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26585"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22423"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22347"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23345"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51033"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29854"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26568"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25127"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11070"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11217"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:13791"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:13829"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41928"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24977"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19712"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62550"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60023"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34099"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17598"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57487"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27001"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17448"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57408"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27004"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20041"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27063"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48676"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21703"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17468"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25187"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44267"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21709"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23241"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27044"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20034"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54602"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17474"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34794"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25206"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10175"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36820"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62260"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20946"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24484"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21932"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21931"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11688"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:9448"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:8490"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:9453"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:8491"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:8493"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:9388"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:9385"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17550"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56431"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41941"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17547"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41944"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56366"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:12279"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:12277"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57013"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40984"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56968"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11916"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22840"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11856"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22629"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21017"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24853"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19375"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22465"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48085"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23361"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11996"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10125"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10130"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24475"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24482"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24479"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24477"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24471"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21769"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19108"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:12116"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19099"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46885"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:28198"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17459"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17458"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11512"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17123"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22258"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17121"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22260"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30650"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:18584"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:18585"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:65906: Red Hat OpenShift Container Platform 4.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65838: Red Hat OpenShift Container Platform 4.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62548: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66385: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17789: Cryostat 4 on RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60452: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60444: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60449: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20569: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27856: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17040: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:16696: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22937: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22450: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19017: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33722: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35833: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48790: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49944: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25252: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25248: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25250: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34192: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:32991: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34196: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34197: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20607: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26054: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17287: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20609: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10135: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19186: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23228: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22714: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19173: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26636: Custom Metric Autoscaler 2.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57590: Red Hat Enterprise Linux Extensions Channel (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26585: Logging for Red Hat OpenShift 6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22423: Multicluster Global Hub 1.3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22347: Multicluster Global Hub 1.4.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23345: Multicluster Global Hub 1.6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29854: OpenShift API for Data Protection 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26568: OpenShift API for Data Protection 1.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25127: Red Hat Advanced Cluster Management for Kubernetes 2.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11070: Red Hat Advanced Cluster Security 4.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11217: Red Hat Advanced Cluster Security 4.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:13791: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62550: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60023: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34099: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17598: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57487: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27001: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17448: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57408: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27004: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20041: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48676: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21703: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25194: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25187: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44267: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21709: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23241: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27044: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20034: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54602: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17474: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34794: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25206: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62260: Red Hat OpenShift Dev Spaces 3.30"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20946: Red Hat OpenShift GitOps 1.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24484: Red Hat OpenShift Pipelines 1.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21932: Red Hat OpenShift Pipelines 1.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21931: Red Hat OpenShift Pipelines 1.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11688: Red Hat OpenShift Service Mesh 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:9448: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:9453: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:9388: Red Hat OpenShift distributed tracing 3.9.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17550: Red Hat Openshift Data Foundation 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41941: Red Hat Openshift Data Foundation 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17547: Red Hat Openshift Data Foundation 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41944: Red Hat Openshift Data Foundation 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56366: Red Hat Openshift Data Foundation 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:12279: Red Hat Openshift Data Foundation 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:12277: Red Hat Openshift Data Foundation 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57013: Red Hat Openshift Data Foundation 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40984: Red Hat Openshift Data Foundation 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56968: Red Hat Openshift Data Foundation 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11916: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22840: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11856: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22629: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21017: Red Hat Quay 3.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24853: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19375: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22465: Red Hat Quay 3.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48085: Red Hat Quay 3.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23361: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11996: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10125: Red Hat Trusted Artifact Signer 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10130: Red Hat Trusted Artifact Signer 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24475: Red Hat Trusted Artifact Signer 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24482: Red Hat Trusted Artifact Signer 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24479: Red Hat Trusted Artifact Signer 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24477: Red Hat Trusted Artifact Signer 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24471: Red Hat Trusted Artifact Signer 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21769: Red Hat multicluster global hub 1.5.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19108: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:12116: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19099: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:28198: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17459: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17458: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11512: multicluster engine for Kubernetes 2.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17123: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22258: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17121: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22260: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:18584: multicluster engine for Kubernetes 2.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:18585: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-04-06T17:01:34.639Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-04-06T16:22:45.353Z",
            "value": "Made public."
          }
        ],
        "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "go-jose",
          "vendor": "go-jose",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.0.0, \u003c 4.1.4"
            },
            {
              "status": "affected",
              "version": "\u003c 3.0.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-06T16:22:45.353Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
        },
        {
          "name": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
        }
      ],
      "source": {
        "advisory": "GHSA-78h2-9frx-2jm8",
        "discovery": "UNKNOWN"
      },
      "title": "Go JOSE affect by a panic in JWE decryption"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-34986",
    "datePublished": "2026-04-06T16:22:45.353Z",
    "dateReserved": "2026-03-31T19:38:31.617Z",
    "dateUpdated": "2026-09-18T12:04:40.279Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:62260

CVE-2025-55163 (GCVE-0-2025-55163)

CVE-2026-10050 (GCVE-0-2026-10050)

CVE-2026-10051 (GCVE-0-2026-10051)

CVE-2026-12143 (GCVE-0-2026-12143)

CVE-2026-12151 (GCVE-0-2026-12151)

CVE-2026-13149 (GCVE-0-2026-13149)

CVE-2026-15075 (GCVE-0-2026-15075)

CVE-2026-15076 (GCVE-0-2026-15076)

CVE-2026-27136 (GCVE-0-2026-27136)

CVE-2026-34986 (GCVE-0-2026-34986)

Tags

Sightings

Nomenclature

Related by attack behaviour